{"id":"GO-2026-5166","revision":"cd0894d154aa48bda7360aa55b529afe","records":[{"revision":"cd0894d154aa48bda7360aa55b529afe","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5166","aliases":["CVE-2026-47671","GHSA-64cj-qvx5-m4f3"],"title":"Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets in github.com/nhost/nhost","description":"Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets in github.com/nhost/nhost","state":0,"publishedAt":"2026-06-25T18:26:48+00:00","modifiedAt":"2026-06-25T18:45:28.0280144+00:00","affected":[{"ecosystem":"Go","name":"github.com/nhost/nhost","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260518172022-e407511627d2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/nhost/nhost/security/advisories/GHSA-64cj-qvx5-m4f3","https://github.com/nhost/nhost/commit/e407511627d2c2c1137a70e9ca1ca31095d23479","https://github.com/nhost/nhost/pull/4302","https://github.com/nhost/nhost/releases/tag/cli@1.46.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5166","license":"OSV · upstream source license applies","key":"osv:GO-2026-5166","identifiers":["GO-2026-5166","CVE-2026-47671","GHSA-64cj-qvx5-m4f3"]},"retained":false,"historicalAffected":[]}],"coverage":[]}