Vendor
high
advisory
SSRF Vulnerability in Nango via Configuration Interpolation
1 TTP 1 CVENango versions through 0.70.4 are vulnerable to Server-Side Request Forgery due to improper validation of user-supplied configuration values in token and proxy URL templates.
Nango
webserver
ssrf
cloud
1t
1c
high
advisory
Authentication Bypass in Nango Runner tRPC Server
2 TTPs 1 CVENango versions prior to 0.71.6 contain an authentication bypass vulnerability allowing unauthenticated attackers to achieve remote code execution via the tRPC runner server.
Nango
vulnerability
remote-code-execution
2t
1c