CVE-2026-33221
2 advisories.
Go/github.com/nhost/nhost CVE-2026-33221: medium 5.3
Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload
Action: Upgrade github.com/nhost/nhost to 0.0.0-20260318074820-c4bd53f042d7 or later.
go get github.com/nhost/nhost@v0.0.0-20260318074820-c4bd53f042d7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260318074820-c4bd53f042d7 |
Sources
- osv: GHSA-g9f6-9775-hffm
- https://github.com/nhost/nhost/security/advisories/GHSA-g9f6-9775-hffm
- https://nvd.nist.gov/vuln/detail/CVE-2026-33221
- https://github.com/nhost/nhost/pull/4018
- https://github.com/nhost/nhost/commit/c4bd53f042d7f568e567e18e2665af81660fce85
- https://github.com/nhost/nhost
- https://github.com/nhost/nhost/releases/tag/storage%400.12.0
- https://github.com/nhost/nhost/releases/tag/storage@0.12.0
CVE-2026-33221 · published · modified · JSON
Go/github.com/nhost/nhost CVE-2026-33221: unknown
Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload in github.com/nhost/nhost
Action: Upgrade github.com/nhost/nhost to 0.0.0-20260318074820-c4bd53f042d7 or later.
go get github.com/nhost/nhost@v0.0.0-20260318074820-c4bd53f042d7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260318074820-c4bd53f042d7 |
Sources
- osv: GO-2026-4759
- https://github.com/nhost/nhost/security/advisories/GHSA-g9f6-9775-hffm
- https://github.com/nhost/nhost/commit/c4bd53f042d7f568e567e18e2665af81660fce85
CVE-2026-33221 · published · modified · JSON