What’s Vulnerable › Products
EnergizeLab NestJS auth service vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your EnergizeLab NestJS auth service version is affected
Latest EnergizeLab NestJS auth service vulnerabilities
- CVE-2026-105040 — EnergizeLab Eilik User-ID Mass Assignment Account Takeover (CVSS 8.8)
- CVE-2026-105034 — EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers (CVSS 8.2)