GHSA-62vx-hpcr-m9ch
NoneCVSS
—
EPSS
—
Published
Nov 20, 2025
CISA due date
—
The record
@perfood/couch-auth may expose session tokens, passwords
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @perfood/couch-auth | 0 | No fix |
Related vulnerabilities
- CVE-2025-60794 @perfood/couch-auth may expose session tokens, passwords Same vulnerability
- GHSA-mjqr-5c55-g77h @perfood/couch-auth has an Observable Timing Discrepancy Also affects @perfood/couch-auth
- GHSA-qw8v-34ww-6q9p @perfood/couch-auth has a host header injection vulnerability Also affects @perfood/couch-auth
- CVE-2025-70948 A host header injection vulnerability in the mailer component of @perfood/couch-auth… Also affects @perfood/couch-auth
- CVE-2025-70949 An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to… Also affects @perfood/couch-auth
- CVE-2026-77407 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-316
- CVE-2026-53604 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. CWE-316
- CVE-2026-75137 UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that… CWE-316