Vulnerabilities

TI-2026-35178 CVE-2026-47671 · GHSA-64cj-qvx5-m4f3

Missing authentication in nhost cli

MEDIUM 58

Nhost is an open source Firebase alternative with GraphQL.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00354 Published 2026-07-21 Fixed in 1.46.0, 0.0.0-20260518172022-e407511627d2 CWE-306

TI-2026-30129 CVE-2026-41574 · GHSA-6g38-8j4p-j3pr

MEDIUM 49

Nhost is an open source Firebase alternative with GraphQL.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00799 Published 2026-05-08 Fixed in 0.49.1, 0.0.0-20260417112436-ec8dab3f2cf4 CWE-287

TI-2026-27191 CVE-2026-34969 · GHSA-g2qj-prgh-4g9r

MEDIUM 45

Nhost is an open source Firebase alternative with GraphQL.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00277 Published 2026-04-06 Fixed in 0.48.0, 0.0.0-20260330133707-294954e0fc3a CWE-200

TI-2026-26496 CVE-2026-34200

HIGH 69

Nhost is an open source Firebase alternative with GraphQL.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00375 Published 2026-03-31 Fixed in 1.41.0 CWE-306

TI-2026-25642 CVE-2026-33221 · GHSA-g9f6-9775-hffm

LOW 10

Nhost is an open source Firebase alternative with GraphQL.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00184 Published 2026-03-20 Fixed in 0.12.0, 0.0.0-20260318074820-c4bd53f042d7 CWE-343