CRITICALnpm
GHSA-gfj5-979r-92pw· CVE-2026-58399@acastellon/auth: Authentication bypass via spoofable headers in validateToken()
Modified: 9/10/2026
package
npm/@acastellon/auth
pkg:npm/%40acastellon/auth
package
pkg:npm/%40acastellon/auth
@acastellon/auth: Authentication bypass via spoofable headers in validateToken()
Modified: 9/10/2026