nforwardauth vulnerabilities

CVEs whose affected-version data names the nforwardauth package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-81509Medium· 6.1

2d ago

nforwardauth: Unvalidated r parameter allows post-authentication open redirect

nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple sites. Versions prior to 1.5.1 accept an unvalidated `r` query parameter on the `/login` endpoint and use them as the post-auth…

▾ Sunlitnosduco · nforwardauthEPSS 0.32%via CVEORG