Left limbo: reviewed by GitHub after 72 days
GHSA-h89v-g948-47vp
moleculer on npm · published in moleculerjs/moleculer
Facts
- Severity
- High · CVSS score 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Affected versions (moleculer)
- >= 0.15.0, < 0.15.2As entered by the maintainer. Not reviewed.
- Fixed in (moleculer)
- 0.15.2
- Affected versions (moleculer)
- < 0.14.36As entered by the maintainer. Not reviewed.
- Fixed in (moleculer)
- 0.14.36
- CVE
- CVE-2026-97705 · published
- GitHub Advisory Database
- Reviewed
- OSV.dev
- Not checked
- Other CVEs pointing here
- None found in the CVE List
If you use moleculer >= 0.15.0, < 0.15.2
Upgrade to 0.15.2 or later. It’s in GitHub’s reviewed database now, so Dependabot, npm audit and OSV-Scanner can report it.
Timeline
2026-08-29 20:32 UTC
Published by the maintainers
Cites CVE-2026-97705
2026-11-05 14:47 UTC
First seen by Limbowatch
In limbo
2026-11-10 00:03 UTC
Reviewed by GitHub
Left limbo after 72 days