High severity8.1GHSA Advisory· Published Feb 11, 2025· Updated Apr 15, 2026
CVE-2025-24876
CVE-2025-24876
Description
The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@sap/approuternpm | >= 2.6.1, < 16.7.2 | 16.7.2 |
Affected products
2Patches
Vulnerability mechanics
References
6News mentions
0No linked articles in our index yet.