Energizelab Nestjs Auth Service
2 CVEs affecting Energizelab Nestjs Auth Service. Latest disclosed: 2026-10-15. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-105040 | High | 8.8 | 2026-10-15 | The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another acc… |
CVE-2026-105034 | High | 8.2 | 2026-10-15 | The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker ca… |