CVE-2026-41574
2 advisories.
Go/github.com/nhost/nhost CVE-2026-41574: critical 9.8
Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass
Action: Upgrade github.com/nhost/nhost to 0.0.0-20260417112436-ec8dab3f2cf4 or later.
go get github.com/nhost/nhost@v0.0.0-20260417112436-ec8dab3f2cf4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260417112436-ec8dab3f2cf4 |
Sources
- osv: GHSA-6g38-8j4p-j3pr
- https://github.com/nhost/nhost/security/advisories/GHSA-6g38-8j4p-j3pr
- https://nvd.nist.gov/vuln/detail/CVE-2026-41574
- https://github.com/nhost/nhost/pull/4162
- https://github.com/nhost/nhost/commit/ec8dab3f2cf46e1131ddaf893d56c37aa00380b2
- https://github.com/nhost/nhost
- https://github.com/nhost/nhost/releases/tag/auth%400.49.1
CVE-2026-41574 · published · modified · JSON
Go/github.com/nhost/nhost CVE-2026-41574: unknown
Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass in github.com/nhost/nhost
Action: Upgrade github.com/nhost/nhost to 0.0.0-20260417112436-ec8dab3f2cf4 or later.
go get github.com/nhost/nhost@v0.0.0-20260417112436-ec8dab3f2cf4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20260417112436-ec8dab3f2cf4 |
Sources
- osv: GO-2026-5176
- https://github.com/nhost/nhost/security/advisories/GHSA-6g38-8j4p-j3pr
- https://nvd.nist.gov/vuln/detail/CVE-2026-41574
- https://github.com/nhost/nhost/commit/ec8dab3f2cf46e1131ddaf893d56c37aa00380b2
- https://github.com/nhost/nhost/pull/4162
- https://github.com/nhost/nhost/releases/tag/auth%400.49.1
CVE-2026-41574 · published · modified · JSON