{"action":"Upgrade github.com/nhost/nhost to 0.0.0-20260417112436-ec8dab3f2cf4 or later.","affected":[{"introduced":"0"}],"component":"github.com/nhost/nhost","cve_ids":["CVE-2026-41574"],"ecosystem":"Go","epss":0.00799,"exploited":false,"fixed_versions":["0.0.0-20260417112436-ec8dab3f2cf4"],"ghsa_id":"GHSA-6g38-8j4p-j3pr","id":"tcs_01M5KGJEWG6JYF0X2V29AS57B2","modified_at":"2026-06-25T18:45:13.445037387Z","published_at":"2026-06-25T18:26:48Z","references":["https://osv.dev/vulnerability/GO-2026-5176","https://github.com/nhost/nhost/security/advisories/GHSA-6g38-8j4p-j3pr","https://nvd.nist.gov/vuln/detail/CVE-2026-41574","https://github.com/nhost/nhost/commit/ec8dab3f2cf46e1131ddaf893d56c37aa00380b2","https://github.com/nhost/nhost/pull/4162","https://github.com/nhost/nhost/releases/tag/auth%400.49.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-5176","url":"https://osv.dev/vulnerability/GO-2026-5176"}],"summary":"Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass in github.com/nhost/nhost"}