CVE-2026-80349 Blast Radius

CRITICAL • CVSS 9.8TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without n…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-80349.

Start Free Scan →← Back to CVE-2026-80349