https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 05:35:03 +0000 https://cve.radiocsirt.org/vuln/cve-2026-34969 <p><strong>Affected:</strong> nhost</p> <p>Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service&#39;s OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter. Refresh tokens in URLs are logged in browser history, server access logs, HTTP Referer headers, and proxy/CDN logs. Note that the refresh token is one-time use and all of these leak vectors are on owned infrastructure or services integrated by the application developer. This vulnerability is fixed in 0.48.0.</p> <p><strong>Affected:</strong> nhost</p> <p>Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service&#39;s OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter. Refresh tokens in URLs are logged in browser history, server access logs, HTTP Referer headers, and proxy/CDN logs. Note that the refresh token is one-time use and all of these leak vectors are on owned infrastructure or services integrated by the application developer. This vulnerability is fixed in 0.48.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-34969