NangoHQ nango vulnerabilities
4 published CVEs name NangoHQ nango among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125759
Nango before 0.71.3 SQL Injection via Orchestrator Task Group Key
NangoHQ · nango
High7.7 - CVE-2026-102596
Nango: Production flow RBAC bypass on private flow-read routes
NangoHQ · nango
Medium4.3 - CVE-2026-92804
Nango through 0.70.4 Server-Side Request Forgery via Configuration
NangoHQ · Nango
High7.1 - CVE-2026-9317
Nango < 0.71.6 Missing Authentication RCE via runner tRPC server
NangoHQ · nango
Critical9.2