FUXA vulnerable to Local File Inclusion

HIGH 7.5CVE-2023-31716 · GHSA-45c3-c4c3-8rqg · Published 22/09/2023 · updated 17/06/2026

In short

CVE-2023-31716 is a HIGH (CVSS 7.5) vulnerability affecting fuxa (frangoteam), @frangoteam/fuxa.
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
fuxa frangoteam	`≤ 1.1.12`	No fix yet
@frangoteam/fuxa npm	`≤ 1.1.12`	No fix yet

FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log

NVD description

FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≤ 1.1.12

No fix yet

npm

≤ 1.1.12

No fix yet

More vulnerabilities in fuxa

See all →