TI-2026-34134 CVE-2026-46421 · GHSA-pvw4-cvr4-97p8
Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)
Priority MEDIUM 49
The SAP Cloud Application Programming Model is a tool for building enterprise-grade cloud applications, and cap-js/cds-dbs is the monorepo for SQL database services for that tool.