Product
Nango versions before 0.71.3 are vulnerable to an unauthenticated SQL injection allowing arbitrary query execution via the orchestrator API.