Executive brief
nhost has Session Persistence After Password Change
Affected products
- Go github.com/nhost/nhost
Junglewise Threat Intelligence
nhost has Session Persistence After Password Change
Severity: medium · CVSS 4 · Published 2026-05-08
Technologies: github.com/nhost/nhost (Go). Vendors: Go.
Related threats
- Nhost CLI missing authentication in local configserver
- GO-2026-5222 - nhost has Session Persistence After Password Change in github.com/nhost/nhost
- Nhost Auth account takeover via OAuth email verification bypass
- Nhost Leaks Refresh Tokens via URL Query Parameter in OAuth Provider Callback
- Nhost Storage Service MIME type spoofing in file upload handler