oidc

• CVE-2026-45321 - TanStack npm supply-chain compromise 2026-06-07
• CVE-2026-41574 - Nhost OAuth email verification bypass 2026-05-02