Medium · 4.3 CVE-2026-30346 EUVD-2026-25877GHSA-595p-pfpq-rpww

An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via…

Published Apr 27, 2026 · Updated Apr 27, 2026 · Assigned by mitre

Description

An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via supplying a crafted URL.

References

https://github.com/hunvreus/devpush
https://github.com/hunvreus/devpush/releases/tag/0.3.2
https://gist.github.com/syphonetic/d4e519904aaa55dbd0e3b87a317660d1