Skip to content

Nhost Nhost\/auth vulnerabilities

nhost, nhost nhost\/auth +1 moreNhost Vulnerable to Account Takeover via OAuth Email Verification BypassCVE-2026-41574Fix available9.3 CriticalApril 18, 2026
nhost, nhost nhost\/auth +1 moreNhost Leaks the Refresh Token via URL Query Parameter in OAuth Provider CallbackCVE-2026-34969Fix available2.3 LowApril 1, 2026