Skip to content
OpenAdvisories

Vendor

nosduco

1 known vulnerabilities.

Products

nforwardauth 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-81509

    nforwardauth: Unvalidated r parameter allows post-authentication open redirect

    nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple sites. Versions prior to 1.5.1 accept an unvalidated `r` query parameter on the `/login` endpoint and use them as the post-authentication redirect de…

    nosduco nforwardauth