
OAuth email verification bypass enables Nhost account takeover
A critical GitHub-reviewed advisory says Nhost’s OAuth account-linking trusts unverified emails from several providers, enabling attackers to merge identities and take over victim sessions.
NewsIdentityOAuth
2 minYesterday
