{"id":1165223,"name":"@sap/xssec","ecosystem":"npm","description":"XS Advanced Container Security API for node.js","homepage":null,"licenses":"SAP DEVELOPER LICENSE AGREEMENT","normalized_licenses":["NASA-1.3"],"repository_url":"","keywords_array":["sap","btp","security","xsuaa","ias"],"namespace":"sap","versions_count":107,"first_release_published_at":"2020-06-11T20:22:15.569Z","latest_release_published_at":"2026-08-10T15:31:11.801Z","latest_release_number":"4.15.0","last_synced_at":"2026-10-08T09:21:48.484Z","created_at":"2022-04-08T12:37:22.317Z","updated_at":"2026-10-08T09:21:48.484Z","registry_url":"https://www.npmjs.com/package/@sap/xssec","install_command":"npm install @sap/xssec","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"4.15.0"},"contentPolicy":null},"repo_metadata":null,"repo_metadata_updated_at":null,"dependent_packages_count":31,"downloads":1370407,"downloads_period":"last-month","dependent_repos_count":836,"rankings":{"downloads":0.3483841367857292,"dependent_repos_count":0.6256237400905329,"dependent_packages_count":0.8394226112463247,"stargazers_count":null,"forks_count":null,"docker_downloads_count":0.8454715524101332,"average":0.6647255101331799},"purl":"pkg:npm/%40sap/xssec","advisories":[{"uuid":"GSA_kwCzR0hTQS1wMnZ4LXFqNjYtODhxM84AA3rz","url":"https://github.com/advisories/GHSA-p2vx-qj66-88q3","title":"Escalation of privileges in @sap/xssec","description":"SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions \u003c 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-12-12T03:31:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-49583","https://me.sap.com/notes/3411067","https://www.npmjs.com/package/@sap/xssec","https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","https://me.sap.com/notes/3412456","https://me.sap.com/notes/3413475","https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067","https://github.com/advisories/GHSA-p2vx-qj66-88q3"],"source_kind":"github","identifiers":["GHSA-p2vx-qj66-88q3","CVE-2023-49583"],"repository_url":null,"blast_radius":0.0,"created_at":"2023-12-20T18:06:14.067Z","updated_at":"2026-09-24T15:11:28.829Z","epss_percentage":0.01085,"epss_percentile":0.63789,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wMnZ4LXFqNjYtODhxM84AA3rz","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wMnZ4LXFqNjYtODhxM84AA3rz","packages":[{"ecosystem":"npm","package_name":"@sap/xssec","versions":[{"first_patched_version":"3.6.0","vulnerable_version_range":"\u003c 3.6.0"}],"purl":"pkg:npm/%40sap%2Fxssec"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wMnZ4LXFqNjYtODhxM84AA3rz/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@sap/xssec","docker_dependents_count":149,"docker_downloads_count":127713,"usage_url":"https://repos.ecosyste.ms/usage/npm/@sap/xssec","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@sap/xssec/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sap%2Fxssec/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sap%2Fxssec/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sap%2Fxssec/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sap%2Fxssec/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sap%2Fxssec/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sap%2Fxssec/codemeta","maintainers":[{"uuid":"sap_extncrepos","login":"sap_extncrepos","name":null,"email":"mob.extrepo.stores@sap.com","url":null,"packages_count":1070,"html_url":"https://www.npmjs.com/~sap_extncrepos","role":null,"created_at":"2022-11-20T23:48:20.973Z","updated_at":"2022-11-20T23:48:20.973Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/sap_extncrepos/packages"},{"uuid":"sap-ospo-admin","login":"sap-ospo-admin","name":null,"email":"ospo@sap.com","url":null,"packages_count":462,"html_url":"https://www.npmjs.com/~sap-ospo-admin","role":null,"created_at":"2026-05-21T15:31:45.030Z","updated_at":"2026-05-21T15:31:45.030Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/sap-ospo-admin/packages"}]}