Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-j5rm-v3vh-vx94
  • PyPI/edumfa
 eduMFA Passkeys: missing expiration flag may allow replay attacks and reuse of old challenges 18 May
  • Fix available
  • Severity - 8.7 (High)
GHSA-qq2p-4282-cfc5
  • PyPI/edumfa
 eduMFA: Incorrect InnoDB snapshot isolation possibly allows token reusage 18 May
  • Fix available
  • Severity - 7.1 (High)
GHSA-74r7-3mjm-jc5v
  • PyPI/edumfa
 eduMFA: Unauthenticated Failcounter Increment on Resolver Tokens via /validate/check 18 May
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-vhmj-5q9r-mm9g
  • PyPI/edumfa
 BlastRADIUS also affects eduMFA 17 Jul 2024
  • Fix available
  • Severity - 5.3 (Medium)