nhost vulnerabilities
5 published CVEs name nhost among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-47671
Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets
nhost · cli
Medium5.4 - CVE-2026-41574
Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass
nhost · nhost
Critical9.3 - CVE-2026-34969
Nhost Leaks the Refresh Token via URL Query Parameter in OAuth Provider Callback
nhost · nhost
Low2.3 - CVE-2026-34200
Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port
nhost · nhost
High7.7 - CVE-2026-33221
Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload
nhost · nhost
Low2.1