CLAIM-2026-08-24-04

The NVD record for CVE-2026-75130 references no fixed version and lists affected versions as 0 through 2.1.2; the Context7 npm package has since progressed to 4.0.x, and no advisory confirms whether current releases remain affected.

Why it matters

Without a named fixed version, 'just upgrade' is not actionable - teams cannot tell whether the version they run is patched.

Sources

• nvdnistnati2026cve