Log in Start free

nhost

Products

ProductCVEsExploitedLatest
nhost4–May 8, 2026
cli1–Jul 21, 2026

Exploited and recent CVEs

  • CVE-2026-47671 Medium 5.4 Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets 0.4%
  • CVE-2026-41574 Critical 9.3 Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass 0.8%
  • CVE-2026-34969 Low 2.3 Nhost Leaks the Refresh Token via URL Query Parameter in OAuth Provider Callback 0.3%
  • CVE-2026-34200 High 7.7 Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port 0.4%
  • CVE-2026-33221 Low 2.1 Nhost Storage Affected by MIME Type Spoofing via Trusted Client Content-Type Header in Storage Upload 0.2%