Perfood vulnerabilities
We track 1 vulnerability in Perfood products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 3, 2024.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest Perfood vulnerabilities
- 9.6 Critical severity
Couchauth: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a specially crafted host header in the forgot password request, it is possible to send password reset links to users which, once clicked, lead to