Security: analogjs/analog
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Analog TransferState cache key collision (32-bit DJB2)GHSA-83pw-83rq-5gh2 published
Aug 17, 2026 by brandonrobertsHigh -
Stored XSS with zero sanitizer & HTML injectionGHSA-h8wh-3724-5q95 published
Aug 17, 2026 by brandonrobertsHigh -
SSRF via API Prefix Stripping in Generated Nitro MiddlewareGHSA-q7p4-cm8g-969j published
Jul 22, 2026 by brandonrobertsCritical
Learn more about advisories related to analogjs/analog in the GitHub Advisory Database