Description
Shynet before 0.14.0 allows Host header injection in the password reset flow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| milesmcc | Shynet | < 0.14.0 | 0.14.0 |
Medium · 6.4
CVE-2026-35507
EUVD-2026-18566GHSA-hvm7-86pv-v2p2
Shynet before 0.14.0 allows Host header injection in the password reset flow.
Published Apr 3, 2026 · Updated Apr 3, 2026 · Assigned by mitre