📦 Couchauth

This host header injection vulnerability in @perfood/couch-auth allows attackers to send password reset links that redirect to attacker-controlled servers, leaking reset tokens. Attackers can then res...

CVE-2025-60794 exposes sensitive authentication data (session tokens and passwords) in couch-auth 0.21.2 due to improper memory clearing. This allows attackers with memory access capabilities to extra...