CVE-2023-39655 — A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a specially crafted host header in the forgot password request, it is possible to — CVE Database · The Intelligence Room