high8.5
CVE-2025-9036
A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token.
Impact
A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token. This token is broadcasted over a WebSocket and can be intercepted by any local client listening on the connection.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.