CVE-2025-70948
Critical · 9.3CVSS
9.3
EPSS
0.4%
Published
Mar 5, 2026
CISA due date
—
The record
A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and execute an account takeover via spoofing the HTTP Host header.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @perfood/couch-auth | 0 | No fix |
Related vulnerabilities
- GHSA-qw8v-34ww-6q9p @perfood/couch-auth has a host header injection vulnerability Same vulnerability
- GHSA-mjqr-5c55-g77h @perfood/couch-auth has an Observable Timing Discrepancy Also affects @perfood/couch-auth
- CVE-2025-70949 An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to… Also affects @perfood/couch-auth
- GHSA-62vx-hpcr-m9ch @perfood/couch-auth may expose session tokens, passwords Also affects @perfood/couch-auth
- CVE-2025-60794 @perfood/couch-auth may expose session tokens, passwords Also affects @perfood/couch-auth
- CVE-2026-67179 Genkit does not properly validate host request headers. CWE-644
- CVE-2026-66778 SAP Approuter does not sufficiently sanitize certain request headers before forwarding… CWE-644
- CVE-2026-72574 A host header injection vulnerability in picocms/Pico through 2.1.4 allows an… CWE-644