CVE-2025-56647 in farminformación

Resumen

por MITRE • 2026-02-12

npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket. The development (hot module reloading) server does not validate origin when connecting to a WebSocket client. This allows attackers to surveil developers running Farm who visit their webpage and steal source code that is leaked by the WebSocket server.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

MITRE

Reservar

2025-08-17

Divulgación

2026-02-12

Moderación

aceptado

Artículo

VDB-345781

CPE

listo

EPSS

0.00188

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-56647
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-56647
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-56647/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!