p PatchFirst

PatchFirst · Latest vulnerabilities

@sap/cds-mtxs vulnerabilities

Vulnerabilities published for @sap/cds-mtxs in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-76969

    Critical · CVSS 9.4EPSS 0.44%Fix available

    Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

    @sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data. Successful exploitation can result in a high impact on availability and integrity of the application. There may also be partial impact to the confidentiality of business data.

    @sap/cds-mtxs @sap/cds-mtxs @sap/cds-mtxs @sap/cds-mtxsNode.js
    • Update to 1.18.4
    • Update to 2.7.7
    • Update to 3.9.7
    • Update to 4.0.3
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →