Go/github.com/nhost/nhost CVE-2026-33221: medium 5.3, EPSS 0.18%
Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload in github.com/nhost/nhost
Action: Upgrade github.com/nhost/nhost to 0.0.0-20260318074820-c4bd53f042d7 or later.
go get github.com/nhost/nhost@v0.0.0-20260318074820-c4bd53f042d7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260318074820-c4bd53f042d7 |
Sources
- osv: GO-2026-4759
- nvd: CVE-2026-33221
- https://github.com/nhost/nhost/security/advisories/GHSA-g9f6-9775-hffm
- https://github.com/nhost/nhost/commit/c4bd53f042d7f568e567e18e2665af81660fce85
CVE-2026-33221 · published · modified · JSON