CVE-2026-22645

Medium · 5.3

CVSS

5.3

EPSS

0.4%

Published

Jan 15, 2026

CISA due date

—

The record

The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components.

Affected packages

Ecosystem	Package	Introduced	Fixed