rexxars
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| eventsource-encoder | 1 | – | May 26, 2026 |
| sse-channel | 1 | – | May 12, 2026 |
Exploited and recent CVEs
- CVE-2026-44214 eventsource-encoder: SSE event injection via unsanitized event and id fields 0.3%
- CVE-2026-44217 sse-channel: SSE Injection via unsanitized event fields 0.5%