serverless-todo vulnerabilities

CVEs whose affected-version data names the serverless-todo package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-90582Medium· 5.3PoC

1w ago

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0. Impacted is the function saveTodos of the file src/index.js of the component API Todo Endpoint. Such manipulation of the argument event.body leads to resource consum…

▾ Twilightevanchiu · serverless-todoEPSS 0.40%via NVD