CVE-2026-30346 - DevPush URL Redirection to Untrusted Site

gistfile1.txt

[Description]
An open redirect in the /api/google/authorize endpoint of hunvreus
DevPush v0.3.2 allows attackers to redirect users to malicious sites
via supplying a crafted URL.

------------------------------------------

[VulnerabilityType Other]
CWE-601: URL Redirection to Untrusted Site (   Open Redirect   )

------------------------------------------

[Vendor of Product]
hunvreus

------------------------------------------

[Affected Product Code Base]
DevPush - 0.3.2

------------------------------------------

[Affected Component]
Google OAuth account-linking endpoints: app/routers/google.py (/api/google/authorize and /api/google/authorize/callback)

------------------------------------------

[Attack Type]
Remote

------------------------------------------

[Impact Information Disclosure]
true

------------------------------------------

[CVE Impact Other]
Phishing / Social Engineering

------------------------------------------

[Attack Vectors]
Malicious actor will have to craft a URL in the following format and send it to the authenticated users:
https://{DEVPUSH_HOST]/api/google/authorize?next=https://{ATTACKER_DOMAIN]/

------------------------------------------

[Reference]
https://github.com/hunvreus/devpush
https://github.com/hunvreus/devpush/releases/tag/0.3.2