@acastellon/auth vulnerabilities (npm)

1 vulnerability.

• @acastellon/auth npm @acastellon/auth has an authentication bypass via spoofable headers in validateToken() CVE-2026-58399 Fix available 8.7 HighJune 18, 2026