Vulnerabilities
CVE-2025-70948 - Couch-Auth Host Header Injection
CVE ID : CVE-2025-70948 Published : March 5, 2026, 9:16 p.m. | 27 minutes ago Description : A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and execute an account takeover via spoofing the HTTP Host header. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
CVE ID
Published
March 5, 2026