CyberSecBulletin

BeProduct vulnerabilities

We track 1 vulnerability in BeProduct products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.

1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score

Latest BeProduct vulnerabilities

  • 10.0 Critical severity

    beproduct-org-nestjs-auth: Embedded Malicious Code

    CVE-2026-46412BeProduct

    @beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS (Identity Server) with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of `@beprodu