Perfood Couchauth vulnerabilities

• perfood couchauth @perfood/couch-auth may expose session tokens, passwords CVE-2025-60794 6.5 MediumNovember 20, 2025
• perfood couchauth CouchAuth host header injection vulnerability leaks the password reset token CVE-2023-39655 9.6 CriticalJanuary 3, 2024