HIGH8.1npm
GHSA-fqh6-6h6c-366m· CVE-2023-39655CouchAuth host header injection vulnerability leaks the password reset token
Modified: 1/3/2024
package
npm/@perfood/couch-auth
pkg:npm/%40perfood/couch-auth
MEDIUMnpm
GHSA-62vx-hpcr-m9ch· CVE-2025-60794@perfood/couch-auth may expose session tokens, passwords
Modified: 11/20/2025
HIGH7.5npm
GHSA-mjqr-5c55-g77h· CVE-2025-70949@perfood/couch-auth has an Observable Timing Discrepancy
Modified: 3/6/2026
CRITICAL9.3npm
GHSA-qw8v-34ww-6q9p· CVE-2025-70948@perfood/couch-auth has a host header injection vulnerability
Modified: 3/6/2026
MEDIUM4.3npm
GHSA-r385-c5fc-x56c· CVE-2024-57177CouchAuth has a Server-Side Template Injection vulnerability in its email functionality
Modified: 12/18/2025