Advisories · Technology
nango.
Every CVE that names nango among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Nango: Production flow RBAC bypass on private flow-read routes
- nango
- Broken access control
- CVSS 7.1 High
Nango through 0.70.4 Server-Side Request Forgery via Configuration
- Nango
- Server-side request forgery (SSRF)
- CVSS 9.2 CriticalCritical · CVSS 9+
Nango < 0.71.6 Missing Authentication RCE via runner tRPC server
- nango
- Authentication bypass