Nangohq Nango
2 CVEs affecting Nangohq Nango. Latest disclosed: 2026-09-16. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-9317 | High | 8.1 | 2026-09-04 | Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execute arbitrary JavaSc… |
CVE-2026-92804 | High | 7.1 | 2026-09-16 | Nango through 0.70.4 fails to validate caller-supplied connection configuration values interpolated into provider token and proxy URL templates. Authenticated… |