High severity7.3GHSA Advisory· Published Feb 10, 2025· Updated Apr 15, 2026
CVE-2024-57177
CVE-2024-57177
Description
A host header injection vulnerability exists in the NPM package of perfood/couch-auth <= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@perfood/couch-authnpm | <= 0.21.2 | — |
Affected products
2- Range: <= 0.21.2
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.