Skip to content
OpenAdvisories

Package · Go

github.com/nhost/nhost

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3

    Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass

    Nhost is an open source Firebase alternative with GraphQL. Prior to version 0.49.1, Nhost automatically links an incoming OAuth identity to an existing Nhost account when the email addresses match. This is only safe when the email has been verified by the OAu…