CVE-2023-39655
1 advisory.
npm/@perfood/couch-auth CVE-2023-39655: high 8.1, EPSS 0.52%
CouchAuth host header injection vulnerability leaks the password reset token
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.20.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fqh6-6h6c-366m
- https://nvd.nist.gov/vuln/detail/CVE-2023-39655
- https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-39655
- https://github.com/perfood/couch-auth
- https://www.npmjs.com/package/%40perfood/couch-auth
CVE-2023-39655 · published · modified · JSON