Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000341

sonatype-2026-000341

FUXA - Initialization of a Resource with an Insecure Default [CVE-2026-25894]

Published Feb 5, 2026

https://github.com/advisories/GHSA-32cc-x95p-fxcg

CVSS ScoreCritical

9.5

Ecosystem	Package	Version


npm	@frangoteam/fuxa	1.0.10
npm	@frangoteam/fuxa	1.0.11
npm	@frangoteam/fuxa	1.0.12
npm	@frangoteam/fuxa	1.0.13
npm	@frangoteam/fuxa	1.0.2
npm	@frangoteam/fuxa	1.0.3
npm	@frangoteam/fuxa	1.0.4
npm	@frangoteam/fuxa	1.0.5
npm	@frangoteam/fuxa	1.0.6
npm	@frangoteam/fuxa	1.0.7
npm	@frangoteam/fuxa	1.0.8
npm	@frangoteam/fuxa	1.0.9
npm	@frangoteam/fuxa	1.1.10
npm	@frangoteam/fuxa	1.1.11
npm	@frangoteam/fuxa	1.1.12
npm	@frangoteam/fuxa	1.1.13
npm	@frangoteam/fuxa	1.1.14
npm	@frangoteam/fuxa	1.1.15
npm	@frangoteam/fuxa	1.1.16
npm	@frangoteam/fuxa	1.1.17
npm	@frangoteam/fuxa	1.1.18
npm	@frangoteam/fuxa	1.1.19
npm	@frangoteam/fuxa	1.1.1
npm	@frangoteam/fuxa	1.1.2
npm	@frangoteam/fuxa	1.1.3
npm	@frangoteam/fuxa	1.1.4
npm	@frangoteam/fuxa	1.1.5
npm	@frangoteam/fuxa	1.1.6
npm	@frangoteam/fuxa	1.1.7
npm	@frangoteam/fuxa	1.1.8
npm	@frangoteam/fuxa	1.1.9
npm	@frangoteam/fuxa	1.2.0
npm	@frangoteam/fuxa	1.2.1
npm	@frangoteam/fuxa	1.2.2-1
npm	@frangoteam/fuxa	1.2.2
npm	@frangoteam/fuxa	1.2.3
npm	@frangoteam/fuxa	1.2.4
npm	@frangoteam/fuxa	1.2.5
npm	@frangoteam/fuxa	1.2.6
npm	@frangoteam/fuxa	1.2.7
npm	@frangoteam/fuxa	1.2.8
npm	@frangoteam/fuxa	1.2.9
npm	@frangoteam/fuxa-min	1.1.19
npm	@frangoteam/fuxa-min	1.2.0
npm	@frangoteam/fuxa-min	1.2.1
npm	@frangoteam/fuxa-min	1.2.2
npm	@frangoteam/fuxa-min	1.2.3
npm	@frangoteam/fuxa-min	1.2.4
npm	@frangoteam/fuxa-min	1.2.5
npm	@frangoteam/fuxa-min	1.2.6

sonatype-2026-000341 | Components Impacted | Sonatype Guide | Sonatype Guide