Vulnerabilities

All ecosystems 2246561 AlmaLinux 5993 Alpaquita 16181 Alpine 4655 Android 3707 Azure Linux 17973 BellSoft Hardened Containers 771 Bitnami 9525 Chainguard 1051055 CleanStart 5459 CRAN 14 crates.io 2768 Debian 69224 Echo 7793 GHC 3 GIT 109201 GitHub Actions 55 Go 9336 Hackage 33 Hex 367 Julia 1713 Linux 29975 Mageia 6239 Maven 7055 MinimOS 149137 npm 229295 NuGet 1872 opam 29 openEuler 8900 openSUSE 14658 OSS-Fuzz 4020 Packagist 7103 Pub 11 PyPI 25502 Red Hat 23557 Rocky Linux 4362 Root 19696 RubyGems 5369 SUSE 23494 SwiftURL 61 TuxCare 10025 Ubuntu 66129 VSCode 21 Wolfi 294225

GHSA-gfj5-979r-92pw

npm/@acastellon/auth

@acastellon/auth: Authentication bypass via spoofable headers in validateToken() 18 Jun

Fix available
Severity - 9.3 (Critical)