CVE-2026-63188

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-63188
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63188.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-63188
Aliases
Downstream
Published
2026-08-19T19:47:05Z
Modified
2026-09-11T03:30:41Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
logto-tunnel serves files outside --experience-path via path traversal
Details

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 0.3.9, the Logto Tunnel npm package enabled createStaticFileProxy from packages/tunnel/src/commands/tunnel/index.ts and passed request.url from static asset requests through packages/tunnel/src/commands/tunnel/utils.ts using path.join(staticPath, request.url) and then fs.open(requestPath, "r") without URL normalization or a containment check. When --experience-path was enabled and the tunnel port was reachable, an unauthenticated requester could send a path containing ../ to createStaticFileProxy and read files outside the configured static directory that were readable by the logto-tunnel process. The service used server.listen(port), which could expose the tunnel to other hosts depending on the platform and deployment. This issue is fixed in version 0.3.9.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63188.json"
}
References

Affected packages

Git / github.com/logto-io/logto

Affected ranges

Type
GIT
Repo
https://github.com/logto-io/logto
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5686815955534f803d3d50738259efd0f741e62c
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.3.9"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

@logto/account-center@0.*
@logto/account-center@0.1.0
@logto/account@0.*
@logto/account@0.1.0
@logto/account@0.2.0
@logto/account@0.3.0
@logto/account@0.4.0
@logto/account@0.4.1
@logto/api@0.*
@logto/api@0.0.0
@logto/api@1.*
@logto/api@1.30.0
@logto/app-insights@1.*
@logto/app-insights@1.0.0
@logto/app-insights@1.0.1
@logto/app-insights@1.1.0
@logto/app-insights@1.2.0
@logto/app-insights@1.3.0
@logto/app-insights@1.3.1
@logto/app-insights@1.4.0
@logto/app-insights@2.*
@logto/app-insights@2.0.0
@logto/app-insights@2.0.1
@logto/app-insights@2.1.0
@logto/cli@1.*
@logto/cli@1.0.0-beta.13
@logto/cloud@0.*
@logto/cloud@0.1.0
@logto/cloud@0.2.1
@logto/cloud@0.2.2
@logto/cloud@0.2.4
@logto/cloud@0.2.5
@logto/cloud@0.2.6
@logto/connector-alipay-native@1.*
@logto/connector-alipay-native@1.0.0
@logto/connector-alipay-native@1.0.1
@logto/connector-alipay-native@1.1.0
@logto/connector-alipay-native@1.2.0
@logto/connector-alipay-native@1.2.1
@logto/connector-alipay-native@1.3.0
@logto/connector-alipay-native@1.3.1
@logto/connector-alipay-native@1.4.0
@logto/connector-alipay-native@1.4.1
@logto/connector-alipay-native@1.4.2
@logto/connector-alipay-native@1.4.3
@logto/connector-alipay-native@1.4.4
@logto/connector-alipay-native@1.4.5
@logto/connector-alipay-web@1.*
@logto/connector-alipay-web@1.0.0
@logto/connector-alipay-web@1.1.0
@logto/connector-alipay-web@1.1.1
@logto/connector-alipay-web@1.2.0
@logto/connector-alipay-web@1.3.0
@logto/connector-alipay-web@1.3.1
@logto/connector-alipay-web@1.4.0
@logto/connector-alipay-web@1.4.1
@logto/connector-alipay-web@1.5.0
@logto/connector-alipay-web@1.6.0
@logto/connector-alipay-web@1.6.1
@logto/connector-alipay-web@1.6.2
@logto/connector-alipay-web@1.6.3
@logto/connector-alipay-web@1.6.4
@logto/connector-aliyun-dm@1.*
@logto/connector-aliyun-dm@1.0.0
@logto/connector-aliyun-dm@1.0.1
@logto/connector-aliyun-dm@1.0.2
@logto/connector-aliyun-dm@1.1.0
@logto/connector-aliyun-dm@1.1.1
@logto/connector-aliyun-dm@1.1.2
@logto/connector-aliyun-dm@1.2.0
@logto/connector-aliyun-dm@1.2.1
@logto/connector-aliyun-dm@1.3.0
@logto/connector-aliyun-dm@1.4.0
@logto/connector-aliyun-dm@1.4.1
@logto/connector-aliyun-dm@1.5.0
@logto/connector-aliyun-dm@1.5.1
@logto/connector-aliyun-dm@1.5.2
@logto/connector-aliyun-dm@1.6.0
@logto/connector-aliyun-sms-mas@1.*
@logto/connector-aliyun-sms-mas@1.0.0
@logto/connector-aliyun-sms-mas@1.1.0
@logto/connector-aliyun-sms@1.*
@logto/connector-aliyun-sms@1.0.0
@logto/connector-aliyun-sms@1.0.1
@logto/connector-aliyun-sms@1.0.2
@logto/connector-aliyun-sms@1.1.0
@logto/connector-aliyun-sms@1.1.1
@logto/connector-aliyun-sms@1.1.2
@logto/connector-aliyun-sms@1.2.0
@logto/connector-aliyun-sms@1.2.1
@logto/connector-aliyun-sms@1.3.0
@logto/connector-aliyun-sms@1.4.0
@logto/connector-aliyun-sms@1.4.1
@logto/connector-aliyun-sms@1.5.0
@logto/connector-aliyun-sms@1.5.1
@logto/connector-aliyun-sms@1.5.2
@logto/connector-aliyun-sms@1.5.3
@logto/connector-amazon@0.*
@logto/connector-amazon@0.0.0
@logto/connector-amazon@0.1.0
@logto/connector-amazon@0.1.1
@logto/connector-amazon@0.2.0
@logto/connector-amazon@0.3.0
@logto/connector-amazon@0.3.1
@logto/connector-amazon@0.3.2
@logto/connector-amazon@0.3.3
@logto/connector-amazon@0.3.4
@logto/connector-apple@1.*
@logto/connector-apple@1.0.0
@logto/connector-apple@1.0.1
@logto/connector-apple@1.0.2
@logto/connector-apple@1.0.3
@logto/connector-apple@1.1.0
@logto/connector-apple@1.2.0
@logto/connector-apple@1.3.0
@logto/connector-apple@1.3.1
@logto/connector-apple@1.4.0
@logto/connector-apple@1.4.1
@logto/connector-apple@1.5.0
@logto/connector-apple@1.6.0
@logto/connector-apple@1.6.1
@logto/connector-apple@1.6.2
@logto/connector-apple@1.6.3
@logto/connector-apple@1.6.4
@logto/connector-apple@1.6.5
@logto/connector-apple@1.6.6
@logto/connector-aws-ses@1.*
@logto/connector-aws-ses@1.0.0
@logto/connector-aws-ses@1.0.1
@logto/connector-aws-ses@1.0.2
@logto/connector-aws-ses@1.1.0
@logto/connector-aws-ses@1.1.1
@logto/connector-aws-ses@1.1.2
@logto/connector-aws-ses@1.2.0
@logto/connector-aws-ses@1.2.1
@logto/connector-aws-ses@1.3.0
@logto/connector-aws-ses@1.4.0
@logto/connector-aws-ses@1.4.1
@logto/connector-aws-ses@1.5.0
@logto/connector-aws-ses@1.5.1
@logto/connector-aws-ses@1.5.2
@logto/connector-aws-ses@1.5.3
@logto/connector-azuread@1.*
@logto/connector-azuread@1.0.0
@logto/connector-azuread@1.0.1
@logto/connector-azuread@1.1.0
@logto/connector-azuread@1.2.0
@logto/connector-azuread@1.3.0
@logto/connector-azuread@1.4.0
@logto/connector-azuread@1.4.1
@logto/connector-azuread@1.4.2
@logto/connector-azuread@1.5.0
@logto/connector-azuread@1.6.0
@logto/connector-azuread@1.6.1
@logto/connector-azuread@1.6.2
@logto/connector-azuread@1.6.3
@logto/connector-azuread@1.6.4
@logto/connector-dingtalk-web@0.*
@logto/connector-dingtalk-web@0.0.0
@logto/connector-dingtalk-web@0.1.0
@logto/connector-dingtalk-web@0.1.1
@logto/connector-dingtalk-web@0.2.0
@logto/connector-dingtalk-web@0.2.1
@logto/connector-dingtalk-web@0.3.0
@logto/connector-dingtalk-web@0.4.0
@logto/connector-dingtalk-web@0.4.1
@logto/connector-dingtalk-web@0.4.2
@logto/connector-dingtalk-web@0.4.3
@logto/connector-dingtalk-web@0.4.4
@logto/connector-dingtalk-web@1.*
@logto/connector-dingtalk-web@1.0.0
@logto/connector-discord@1.*
@logto/connector-discord@1.0.0
@logto/connector-discord@1.1.0
@logto/connector-discord@1.1.1
@logto/connector-discord@1.2.0
@logto/connector-discord@1.3.0
@logto/connector-discord@1.3.1
@logto/connector-discord@1.4.0
@logto/connector-discord@1.4.1
@logto/connector-discord@1.5.0
@logto/connector-discord@1.6.0
@logto/connector-discord@1.6.1
@logto/connector-discord@1.6.2
@logto/connector-discord@1.6.3
@logto/connector-discord@1.6.4
@logto/connector-facebook@1.*
@logto/connector-facebook@1.0.0
@logto/connector-facebook@1.1.0
@logto/connector-facebook@1.1.1
@logto/connector-facebook@1.2.0
@logto/connector-facebook@1.3.0
@logto/connector-facebook@1.3.1
@logto/connector-facebook@1.4.0
@logto/connector-facebook@1.4.1
@logto/connector-facebook@1.5.0
@logto/connector-facebook@1.6.0
@logto/connector-facebook@1.6.1
@logto/connector-facebook@1.6.2
@logto/connector-facebook@1.6.3
@logto/connector-facebook@1.6.4
@logto/connector-feishu-web@1.*
@logto/connector-feishu-web@1.0.0
@logto/connector-feishu-web@1.0.1
@logto/connector-feishu-web@1.1.0
@logto/connector-feishu-web@1.2.0
@logto/connector-feishu-web@1.2.1
@logto/connector-feishu-web@1.3.0
@logto/connector-feishu-web@1.3.1
@logto/connector-feishu-web@1.4.0
@logto/connector-feishu-web@1.4.1
@logto/connector-feishu-web@1.4.2
@logto/connector-feishu-web@1.4.3
@logto/connector-feishu-web@1.4.4
@logto/connector-feishu-web@1.4.5
@logto/connector-gatewayapi-sms@0.*
@logto/connector-gatewayapi-sms@0.0.0
@logto/connector-gatewayapi-sms@1.*
@logto/connector-gatewayapi-sms@1.0.0
@logto/connector-gatewayapi-sms@1.0.1
@logto/connector-gatewayapi-sms@1.1.0
@logto/connector-gatewayapi-sms@1.1.1
@logto/connector-gatewayapi-sms@1.2.0
@logto/connector-gatewayapi-sms@1.2.1
@logto/connector-gatewayapi-sms@1.2.2
@logto/connector-gatewayapi-sms@1.2.3
@logto/connector-github@1.*
@logto/connector-github@1.0.0
@logto/connector-github@1.1.0
@logto/connector-github@1.1.1
@logto/connector-github@1.2.0
@logto/connector-github@1.3.0
@logto/connector-github@1.4.0
@logto/connector-github@1.4.1
@logto/connector-github@1.4.2
@logto/connector-github@1.5.0
@logto/connector-github@1.5.1
@logto/connector-github@1.6.0
@logto/connector-github@1.7.0
@logto/connector-github@1.7.1
@logto/connector-github@1.7.2
@logto/connector-github@1.7.3
@logto/connector-github@1.7.4
@logto/connector-gitlab@0.*
@logto/connector-gitlab@0.0.1
@logto/connector-gitlab@1.*
@logto/connector-gitlab@1.0.0
@logto/connector-gitlab@1.0.1
@logto/connector-gitlab@1.1.0
@logto/connector-gitlab@1.2.0
@logto/connector-gitlab@1.2.1
@logto/connector-gitlab@1.2.2
@logto/connector-gitlab@1.2.3
@logto/connector-gitlab@1.2.4
@logto/connector-gitlab@1.2.5
@logto/connector-gitlab@1.2.6
@logto/connector-google@1.*
@logto/connector-google@1.0.0
@logto/connector-google@1.1.0
@logto/connector-google@1.1.1
@logto/connector-google@1.2.0
@logto/connector-google@1.3.0
@logto/connector-google@1.4.0
@logto/connector-google@1.5.0
@logto/connector-google@1.6.0
@logto/connector-google@1.6.1
@logto/connector-google@1.7.0
@logto/connector-google@1.8.0
@logto/connector-google@1.8.1
@logto/connector-google@1.8.2
@logto/connector-google@1.8.3
@logto/connector-google@1.8.4
@logto/connector-http-email@0.*
@logto/connector-http-email@0.1.0
@logto/connector-http-email@0.2.0
@logto/connector-http-email@0.2.1
@logto/connector-http-email@0.3.0
@logto/connector-http-email@0.3.1
@logto/connector-http-email@0.3.2
@logto/connector-http-email@0.4.0
@logto/connector-http-email@0.4.1
@logto/connector-http-email@0.4.2
@logto/connector-http-sms@0.*
@logto/connector-http-sms@0.0.0
@logto/connector-http-sms@0.1.0
@logto/connector-http-sms@0.2.0
@logto/connector-http-sms@0.2.1
@logto/connector-huggingface@0.*
@logto/connector-huggingface@0.0.0
@logto/connector-huggingface@0.1.0
@logto/connector-huggingface@0.1.1
@logto/connector-huggingface@0.2.0
@logto/connector-huggingface@0.2.1
@logto/connector-huggingface@0.3.0
@logto/connector-huggingface@0.4.0
@logto/connector-huggingface@0.4.1
@logto/connector-huggingface@0.4.2
@logto/connector-huggingface@0.4.3
@logto/connector-huggingface@0.4.4
@logto/connector-huggingface@0.4.5
@logto/connector-huggingface@0.4.6
@logto/connector-kakao@1.*
@logto/connector-kakao@1.0.0
@logto/connector-kakao@1.0.1
@logto/connector-kakao@1.1.0
@logto/connector-kakao@1.2.0
@logto/connector-kakao@1.2.1
@logto/connector-kakao@1.3.0
@logto/connector-kakao@1.3.1
@logto/connector-kakao@1.4.0
@logto/connector-kakao@1.4.1
@logto/connector-kakao@1.4.2
@logto/connector-kakao@1.4.3
@logto/connector-kakao@1.4.4
@logto/connector-kakao@1.4.5
@logto/connector-kit@1.*
@logto/connector-kit@1.0.0
@logto/connector-kit@1.0.0-beta.31
@logto/connector-kit@1.0.0-beta.32
@logto/connector-kit@1.0.0-beta.33
@logto/connector-kit@1.0.0-rc.0
@logto/connector-kit@1.0.0-rc.1
@logto/connector-kit@1.0.0-rc.2
@logto/connector-kit@1.0.0-rc.3
@logto/connector-kit@1.1.1
@logto/connector-kit@2.*
@logto/connector-kit@2.0.0
@logto/connector-kit@2.1.0
@logto/connector-kit@3.*
@logto/connector-kit@3.0.0
@logto/connector-kit@4.*
@logto/connector-kit@4.0.0
@logto/connector-kit@4.1.0
@logto/connector-kit@4.1.1
@logto/connector-kit@4.2.0
@logto/connector-kit@4.3.0
@logto/connector-kit@4.4.0
@logto/connector-kit@4.5.0
@logto/connector-kit@4.6.0
@logto/connector-kit@4.7.0
@logto/connector-kit@5.*
@logto/connector-kit@5.0.0
@logto/connector-kit@5.0.1
@logto/connector-kook@0.*
@logto/connector-kook@0.1.0
@logto/connector-kook@0.2.0
@logto/connector-kook@0.2.1
@logto/connector-kook@0.3.0
@logto/connector-kook@0.4.0
@logto/connector-kook@0.4.1
@logto/connector-kook@0.4.2
@logto/connector-kook@0.4.3
@logto/connector-kook@0.4.4
@logto/connector-kook@0.4.5
@logto/connector-kook@0.4.6
@logto/connector-line@0.*
@logto/connector-line@0.1.0
@logto/connector-line@0.1.1
@logto/connector-line@0.2.0
@logto/connector-line@0.3.0
@logto/connector-line@0.3.1
@logto/connector-line@0.3.2
@logto/connector-line@0.3.3
@logto/connector-line@0.3.4
@logto/connector-linkedin@0.*
@logto/connector-linkedin@0.0.0
@logto/connector-linkedin@0.1.0
@logto/connector-linkedin@0.2.0
@logto/connector-linkedin@0.3.0
@logto/connector-linkedin@0.3.1
@logto/connector-linkedin@0.3.2
@logto/connector-linkedin@0.3.3
@logto/connector-linkedin@0.3.4
@logto/connector-logto-email@1.*
@logto/connector-logto-email@1.0.0
@logto/connector-logto-email@1.0.1
@logto/connector-logto-email@1.1.0
@logto/connector-logto-email@1.1.1
@logto/connector-logto-email@1.1.2
@logto/connector-logto-email@1.2.0
@logto/connector-logto-email@1.2.1
@logto/connector-logto-email@1.3.0
@logto/connector-logto-email@1.3.1
@logto/connector-logto-email@1.3.2
@logto/connector-logto-email@1.3.3
@logto/connector-logto-email@1.3.4
@logto/connector-logto-email@1.3.5
@logto/connector-logto-sms@1.*
@logto/connector-logto-sms@1.0.0
@logto/connector-logto-sms@1.0.1
@logto/connector-logto-sms@1.1.0
@logto/connector-logto-sms@1.1.1
@logto/connector-logto-sms@1.1.2
@logto/connector-logto-sms@1.2.0
@logto/connector-logto-sms@1.2.1
@logto/connector-logto-sms@1.3.0
@logto/connector-logto-sms@1.3.1
@logto/connector-logto-sms@1.3.2
@logto/connector-logto-social-demo@1.*
@logto/connector-logto-social-demo@1.0.0
@logto/connector-logto-social-demo@1.0.1
@logto/connector-logto-social-demo@1.1.0
@logto/connector-logto-social-demo@1.1.1
@logto/connector-logto-social-demo@1.1.2
@logto/connector-logto-social-demo@1.2.0
@logto/connector-logto-social-demo@1.2.1
@logto/connector-logto-social-demo@1.3.0
@logto/connector-logto-social-demo@1.3.1
@logto/connector-logto-social-demo@1.3.2
@logto/connector-logto-social-demo@1.3.3
@logto/connector-logto-social-demo@1.3.4
@logto/connector-logto-social-demo@1.3.5
@logto/connector-mailgun@1.*
@logto/connector-mailgun@1.0.0
@logto/connector-mailgun@1.1.0
@logto/connector-mailgun@1.1.1
@logto/connector-mailgun@1.2.0
@logto/connector-mailgun@1.2.1
@logto/connector-mailgun@1.2.2
@logto/connector-mailgun@1.3.0
@logto/connector-mailgun@1.3.1
@logto/connector-mailgun@1.4.0
@logto/connector-mailgun@1.5.0
@logto/connector-mailgun@1.5.1
@logto/connector-mailgun@1.5.2
@logto/connector-mailgun@1.5.3
@logto/connector-mailgun@1.5.4
@logto/connector-mailgun@1.5.5
@logto/connector-mailjunky@1.*
@logto/connector-mailjunky@1.5.2
@logto/connector-mailjunky@1.6.0
@logto/connector-mock-email@1.*
@logto/connector-mock-email@1.0.0
@logto/connector-mock-email@1.0.1
@logto/connector-mock-email@2.*
@logto/connector-mock-email@2.0.0
@logto/connector-mock-email@2.0.1
@logto/connector-mock-email@2.0.2
@logto/connector-mock-email@2.1.0
@logto/connector-mock-email@2.1.1
@logto/connector-mock-email@2.2.0
@logto/connector-mock-email@2.2.1
@logto/connector-mock-email@2.3.0
@logto/connector-mock-email@2.3.1
@logto/connector-mock-email@2.3.2
@logto/connector-mock-email@3.*
@logto/connector-mock-email@3.0.0
@logto/connector-mock-email@3.0.1
@logto/connector-mock-sms@1.*
@logto/connector-mock-sms@1.0.0
@logto/connector-mock-sms@1.0.1
@logto/connector-mock-sms@2.*
@logto/connector-mock-sms@2.0.0
@logto/connector-mock-sms@2.0.1
@logto/connector-mock-sms@2.0.2
@logto/connector-mock-sms@2.1.0
@logto/connector-mock-sms@2.1.1
@logto/connector-mock-sms@2.2.0
@logto/connector-mock-sms@2.2.1
@logto/connector-mock-sms@2.3.0
@logto/connector-mock-sms@2.3.1
@logto/connector-mock-sms@2.3.2
@logto/connector-mock-sms@3.*
@logto/connector-mock-sms@3.0.0
@logto/connector-mock-sms@3.0.1
@logto/connector-mock-social@1.*
@logto/connector-mock-social@1.0.0
@logto/connector-mock-social@1.0.1
@logto/connector-mock-social@1.1.0
@logto/connector-mock-social@1.2.0
@logto/connector-mock-social@1.2.1
@logto/connector-mock-social@1.3.0
@logto/connector-mock-social@1.3.1
@logto/connector-mock-social@1.4.0
@logto/connector-mock-social@1.5.0
@logto/connector-mock-social@1.5.1
@logto/connector-mock-social@1.5.2
@logto/connector-mock-social@1.5.3
@logto/connector-mock-social@1.5.4
@logto/connector-mock-standard-email@1.*
@logto/connector-mock-standard-email@1.0.0
@logto/connector-mock-standard-email@1.0.1
@logto/connector-mock-standard-email@2.*
@logto/connector-mock-standard-email@2.0.0
@logto/connector-mock-standard-email@2.0.1
@logto/connector-mock-standard-email@2.0.2
@logto/connector-mock-standard-email@2.1.0
@logto/connector-mock-standard-email@2.1.1
@logto/connector-mock-standard-email@2.2.0
@logto/connector-mock-standard-email@2.2.1
@logto/connector-mock-standard-email@2.2.2
@logto/connector-mock-standard-email@2.2.3
@logto/connector-mock-standard-email@3.*
@logto/connector-mock-standard-email@3.0.0
@logto/connector-mock-standard-email@3.0.1
@logto/connector-naver@1.*
@logto/connector-naver@1.0.0
@logto/connector-naver@1.0.1
@logto/connector-naver@1.1.0
@logto/connector-naver@1.2.0
@logto/connector-naver@1.2.1
@logto/connector-naver@1.3.0
@logto/connector-naver@1.3.1
@logto/connector-naver@1.4.0
@logto/connector-naver@1.4.1
@logto/connector-naver@1.4.2
@logto/connector-naver@1.4.3
@logto/connector-naver@1.4.4
@logto/connector-naver@1.4.5
@logto/connector-oauth@1.*
@logto/connector-oauth@1.0.0
@logto/connector-oauth@1.0.1
@logto/connector-oauth@1.1.0
@logto/connector-oauth@1.2.0
@logto/connector-oauth@1.3.0
@logto/connector-oauth@1.3.1
@logto/connector-oauth@1.4.0
@logto/connector-oauth@1.5.0
@logto/connector-oauth@1.5.1
@logto/connector-oauth@1.6.0
@logto/connector-oauth@1.7.0
@logto/connector-oauth@1.7.1
@logto/connector-oauth@1.7.2
@logto/connector-oauth@1.7.3
@logto/connector-oauth@1.7.4
@logto/connector-oauth@1.7.5
@logto/connector-oauth@1.7.6
@logto/connector-oidc@1.*
@logto/connector-oidc@1.0.0
@logto/connector-oidc@1.0.1
@logto/connector-oidc@1.0.2
@logto/connector-oidc@1.0.3
@logto/connector-oidc@1.1.0
@logto/connector-oidc@1.2.0
@logto/connector-oidc@1.3.0
@logto/connector-oidc@1.3.1
@logto/connector-oidc@1.4.0
@logto/connector-oidc@1.4.1
@logto/connector-oidc@1.5.0
@logto/connector-oidc@1.6.0
@logto/connector-oidc@1.6.1
@logto/connector-oidc@1.6.2
@logto/connector-oidc@1.7.0
@logto/connector-oidc@1.7.1
@logto/connector-oidc@1.7.2
@logto/connector-oidc@1.7.3
@logto/connector-patreon@0.*
@logto/connector-patreon@0.0.1
@logto/connector-patreon@1.*
@logto/connector-patreon@1.0.0
@logto/connector-patreon@1.0.1
@logto/connector-patreon@1.1.0
@logto/connector-patreon@1.2.0
@logto/connector-patreon@1.2.1
@logto/connector-patreon@1.2.2
@logto/connector-patreon@1.2.3
@logto/connector-patreon@1.2.4
@logto/connector-patreon@1.2.5
@logto/connector-patreon@1.2.6
@logto/connector-postmark@0.*
@logto/connector-postmark@0.0.0
@logto/connector-postmark@1.*
@logto/connector-postmark@1.0.0
@logto/connector-postmark@1.0.1
@logto/connector-postmark@1.1.0
@logto/connector-postmark@1.1.1
@logto/connector-postmark@1.2.0
@logto/connector-postmark@1.2.1
@logto/connector-postmark@1.2.2
@logto/connector-postmark@1.2.3
@logto/connector-qq@0.*
@logto/connector-qq@0.1.0
@logto/connector-qq@1.*
@logto/connector-qq@1.0.0
@logto/connector-qq@1.1.0
@logto/connector-qq@1.1.1
@logto/connector-qq@1.1.2
@logto/connector-qq@1.1.3
@logto/connector-qq@1.1.4
@logto/connector-saml@1.*
@logto/connector-saml@1.0.0
@logto/connector-saml@1.0.1
@logto/connector-saml@1.0.2
@logto/connector-saml@1.1.0
@logto/connector-saml@1.1.1
@logto/connector-saml@1.1.2
@logto/connector-saml@1.2.0
@logto/connector-saml@1.2.1
@logto/connector-saml@1.3.0
@logto/connector-saml@1.3.1
@logto/connector-saml@1.3.2
@logto/connector-saml@1.3.3
@logto/connector-saml@1.3.4
@logto/connector-saml@1.3.5
@logto/connector-sendgrid-email@1.*
@logto/connector-sendgrid-email@1.0.0
@logto/connector-sendgrid-email@1.0.1
@logto/connector-sendgrid-email@1.0.2
@logto/connector-sendgrid-email@1.1.0
@logto/connector-sendgrid-email@1.1.1
@logto/connector-sendgrid-email@1.1.2
@logto/connector-sendgrid-email@1.2.0
@logto/connector-sendgrid-email@1.2.1
@logto/connector-sendgrid-email@1.3.0
@logto/connector-sendgrid-email@1.4.0
@logto/connector-sendgrid-email@1.4.1
@logto/connector-sendgrid-email@1.5.0
@logto/connector-sendgrid-email@1.5.1
@logto/connector-sendgrid-email@1.5.2
@logto/connector-sendgrid-email@1.5.3
@logto/connector-slack@0.*
@logto/connector-slack@0.0.0
@logto/connector-slack@0.1.0
@logto/connector-slack@0.2.0
@logto/connector-slack@0.3.0
@logto/connector-slack@0.3.1
@logto/connector-slack@0.3.2
@logto/connector-slack@0.3.3
@logto/connector-slack@0.3.4
@logto/connector-smsaero@1.*
@logto/connector-smsaero@1.0.0
@logto/connector-smsaero@1.1.0
@logto/connector-smsaero@1.1.1
@logto/connector-smsaero@1.2.0
@logto/connector-smsaero@1.2.1
@logto/connector-smsaero@1.2.2
@logto/connector-smsaero@1.3.0
@logto/connector-smsaero@1.3.1
@logto/connector-smsaero@1.4.0
@logto/connector-smsaero@1.4.1
@logto/connector-smsaero@1.5.0
@logto/connector-smsaero@1.5.1
@logto/connector-smsaero@1.5.2
@logto/connector-smsaero@1.5.3
@logto/connector-smsbao-sms@1.*
@logto/connector-smsbao-sms@1.0.0
@logto/connector-smsbao-sms@1.1.0
@logto/connector-smtp2go-email@1.*
@logto/connector-smtp2go-email@1.0.0
@logto/connector-smtp@1.*
@logto/connector-smtp@1.0.0
@logto/connector-smtp@1.0.1
@logto/connector-smtp@1.1.0
@logto/connector-smtp@1.1.1
@logto/connector-smtp@1.1.2
@logto/connector-smtp@1.1.3
@logto/connector-smtp@1.2.0
@logto/connector-smtp@1.2.1
@logto/connector-smtp@1.3.0
@logto/connector-smtp@1.4.0
@logto/connector-smtp@1.4.1
@logto/connector-smtp@1.5.0
@logto/connector-smtp@1.5.1
@logto/connector-smtp@1.5.2
@logto/connector-smtp@1.5.3
@logto/connector-tencent-sms@1.*
@logto/connector-tencent-sms@1.0.0
@logto/connector-tencent-sms@1.0.1
@logto/connector-tencent-sms@1.1.0
@logto/connector-tencent-sms@1.1.1
@logto/connector-tencent-sms@1.1.2
@logto/connector-tencent-sms@1.2.0
@logto/connector-tencent-sms@1.2.1
@logto/connector-tencent-sms@1.3.0
@logto/connector-tencent-sms@1.3.1
@logto/connector-tencent-sms@1.4.0
@logto/connector-tencent-sms@1.4.1
@logto/connector-tencent-sms@1.4.2
@logto/connector-tencent-sms@1.4.3
@logto/connector-twilio-sms@1.*
@logto/connector-twilio-sms@1.0.0
@logto/connector-twilio-sms@1.0.1
@logto/connector-twilio-sms@1.1.0
@logto/connector-twilio-sms@1.1.1
@logto/connector-twilio-sms@1.1.2
@logto/connector-twilio-sms@1.2.0
@logto/connector-twilio-sms@1.2.1
@logto/connector-twilio-sms@1.3.0
@logto/connector-twilio-sms@1.3.1
@logto/connector-twilio-sms@1.4.0
@logto/connector-twilio-sms@1.4.1
@logto/connector-twilio-sms@1.4.2
@logto/connector-twilio-sms@1.4.3
@logto/connector-vonage-sms@0.*
@logto/connector-vonage-sms@0.0.0
@logto/connector-vonage-sms@0.0.1
@logto/connector-vonage-sms@0.1.0
@logto/connector-vonage-sms@0.1.1
@logto/connector-vonage-sms@0.2.0
@logto/connector-vonage-sms@0.2.1
@logto/connector-vonage-sms@0.2.2
@logto/connector-vonage-sms@0.2.3
@logto/connector-wechat-native@1.*
@logto/connector-wechat-native@1.0.0
@logto/connector-wechat-native@1.0.1
@logto/connector-wechat-native@1.1.0
@logto/connector-wechat-native@1.2.0
@logto/connector-wechat-native@1.2.1
@logto/connector-wechat-native@1.3.0
@logto/connector-wechat-native@1.3.1
@logto/connector-wechat-native@1.4.0
@logto/connector-wechat-native@1.4.1
@logto/connector-wechat-native@1.4.2
@logto/connector-wechat-native@1.4.3
@logto/connector-wechat-native@1.4.4
@logto/connector-wechat-native@1.4.5
@logto/connector-wechat-web@1.*
@logto/connector-wechat-web@1.0.0
@logto/connector-wechat-web@1.1.0
@logto/connector-wechat-web@1.1.1
@logto/connector-wechat-web@1.2.0
@logto/connector-wechat-web@1.3.0
@logto/connector-wechat-web@1.3.1
@logto/connector-wechat-web@1.4.0
@logto/connector-wechat-web@1.4.1
@logto/connector-wechat-web@1.5.0
@logto/connector-wechat-web@1.6.0
@logto/connector-wechat-web@1.6.1
@logto/connector-wechat-web@1.6.2
@logto/connector-wechat-web@1.6.3
@logto/connector-wechat-web@1.6.4
@logto/connector-wecom@0.*
@logto/connector-wecom@0.1.0
@logto/connector-wecom@0.2.0
@logto/connector-wecom@0.2.1
@logto/connector-wecom@0.3.0
@logto/connector-wecom@0.3.1
@logto/connector-wecom@0.3.2
@logto/connector-wecom@0.4.0
@logto/connector-wecom@0.5.0
@logto/connector-wecom@0.5.1
@logto/connector-wecom@0.5.2
@logto/connector-wecom@0.5.3
@logto/connector-wecom@0.6.0
@logto/connector-whatsapp-sms@1.*
@logto/connector-whatsapp-sms@1.0.0
@logto/connector-whatsapp-sms@1.0.1
@logto/connector-whatsapp-sms@1.0.2
@logto/connector-x@0.*
@logto/connector-x@0.0.0
@logto/connector-x@0.1.0
@logto/connector-x@0.1.1
@logto/connector-x@0.2.0
@logto/connector-x@0.3.0
@logto/connector-x@0.4.0
@logto/connector-x@0.4.1
@logto/connector-x@0.4.2
@logto/connector-x@0.4.3
@logto/connector-xiaomi@1.*
@logto/connector-xiaomi@1.0.0
@logto/connector-xiaomi@1.0.1
@logto/connector-xiaomi@1.1.0
@logto/connector-xiaomi@1.2.0
@logto/connector-xiaomi@1.2.1
@logto/connector-xiaomi@1.2.2
@logto/connector-xiaomi@1.2.3
@logto/connector-xiaomi@1.2.4
@logto/connector-yunpian-sms@1.*
@logto/connector-yunpian-sms@1.0.0
@logto/connector-yunpian-sms@1.0.1
@logto/connector-yunpian-sms@1.1.0
@logto/connector-yunpian-sms@1.1.1
@logto/connector-yunpian-sms@1.2.0
@logto/connector-yunpian-sms@1.2.1
@logto/connector-yunpian-sms@1.2.2
@logto/connector-yunpian-sms@1.2.3
@logto/console@1.*
@logto/console@1.1.0
@logto/console@1.10.0
@logto/console@1.11.0
@logto/console@1.12.0
@logto/console@1.12.1
@logto/console@1.13.0
@logto/console@1.14.0
@logto/console@1.15.0
@logto/console@1.16.0
@logto/console@1.17.0
@logto/console@1.18.0
@logto/console@1.18.1
@logto/console@1.19.0
@logto/console@1.2.0
@logto/console@1.2.1
@logto/console@1.2.2
@logto/console@1.2.3
@logto/console@1.2.4
@logto/console@1.20.0
@logto/console@1.21.0
@logto/console@1.22.0
@logto/console@1.22.1
@logto/console@1.23.0
@logto/console@1.24.0
@logto/console@1.25.0
@logto/console@1.26.0
@logto/console@1.27.0
@logto/console@1.28.0
@logto/console@1.29.0
@logto/console@1.30.0
@logto/console@1.31.0
@logto/console@1.32.0
@logto/console@1.33.0
@logto/console@1.34.0
@logto/console@1.35.0
@logto/console@1.36.0
@logto/console@1.37.0
@logto/console@1.4.0
@logto/console@1.5.0
@logto/console@1.5.1
@logto/console@1.6.0
@logto/console@1.7.0
@logto/console@1.7.1
@logto/console@1.8.0
@logto/console@1.9.0
@logto/core-kit@1.*
@logto/core-kit@1.0.0
@logto/core-kit@1.0.0-beta.29
@logto/core-kit@1.0.0-beta.30
@logto/core-kit@1.0.0-rc.0
@logto/core-kit@2.*
@logto/core-kit@2.0.0
@logto/core-kit@2.0.1
@logto/core-kit@2.1.0
@logto/core-kit@2.1.1
@logto/core-kit@2.1.2
@logto/core-kit@2.10.0
@logto/core-kit@2.2.0
@logto/core-kit@2.2.1
@logto/core-kit@2.3.0
@logto/core-kit@2.4.0
@logto/core-kit@2.5.0
@logto/core-kit@2.5.1
@logto/core-kit@2.5.2
@logto/core-kit@2.5.3
@logto/core-kit@2.5.4
@logto/core-kit@2.6.0
@logto/core-kit@2.6.1
@logto/core-kit@2.7.0
@logto/core-kit@2.7.1
@logto/core-kit@2.8.0
@logto/core-kit@2.9.0
@logto/core@1.*
@logto/core@1.0.0-beta.13
@logto/core@1.0.0-beta.18
@logto/core@1.0.0-rc.0
@logto/core@1.0.0-rc.1
@logto/core@1.0.0-rc.2
@logto/core@1.0.1
@logto/core@1.0.2
@logto/core@1.1.0
@logto/core@1.10.0
@logto/core@1.10.1
@logto/core@1.11.0
@logto/core@1.12.0
@logto/core@1.13.0
@logto/core@1.13.1
@logto/core@1.14.0
@logto/core@1.15.0
@logto/core@1.16.0
@logto/core@1.17.0
@logto/core@1.18.0
@logto/core@1.19.0
@logto/core@1.2.0
@logto/core@1.2.1
@logto/core@1.2.2
@logto/core@1.2.3
@logto/core@1.20.0
@logto/core@1.21.0
@logto/core@1.22.0
@logto/core@1.23.0
@logto/core@1.23.1
@logto/core@1.24.0
@logto/core@1.24.1
@logto/core@1.25.0
@logto/core@1.26.0
@logto/core@1.27.0
@logto/core@1.28.0
@logto/core@1.29.0
@logto/core@1.3.0
@logto/core@1.30.1
@logto/core@1.31.0
@logto/core@1.32.0
@logto/core@1.33.0
@logto/core@1.34.0
@logto/core@1.35.0
@logto/core@1.36.0
@logto/core@1.37.0
@logto/core@1.37.1
@logto/core@1.38.0
@logto/core@1.39.0
@logto/core@1.40.0
@logto/core@1.40.1
@logto/core@1.5.0
@logto/core@1.6.0
@logto/core@1.7.0
@logto/core@1.8.0
@logto/core@1.9.0
@logto/core@1.9.1
@logto/core@1.9.2
@logto/demo-app@1.*
@logto/demo-app@1.0.0-beta.12
@logto/demo-app@1.0.0-beta.13
@logto/demo-app@1.0.0-rc.0
@logto/demo-app@1.0.1
@logto/demo-app@1.1.0
@logto/demo-app@1.2.0
@logto/demo-app@1.3.0
@logto/demo-app@1.4.0
@logto/demo-app@1.4.1
@logto/demo-app@1.4.2
@logto/demo-app@1.5.0
@logto/device-demo-app@0.*
@logto/device-demo-app@0.1.0
@logto/elements@0.*
@logto/elements@0.0.0
@logto/elements@0.0.1
@logto/elements@0.0.2
@logto/elements@0.1.0
@logto/experience-legacy@1.*
@logto/experience-legacy@1.10.0
@logto/experience-legacy@1.11.0
@logto/experience-legacy@1.11.1
@logto/experience-legacy@1.8.0
@logto/experience-legacy@1.9.0
@logto/experience@1.*
@logto/experience@1.1.5
@logto/experience@1.10.0
@logto/experience@1.11.0
@logto/experience@1.11.1
@logto/experience@1.11.2
@logto/experience@1.12.0
@logto/experience@1.13.0
@logto/experience@1.14.0
@logto/experience@1.15.0
@logto/experience@1.16.0
@logto/experience@1.16.1
@logto/experience@1.17.0
@logto/experience@1.18.0
@logto/experience@1.18.1
@logto/experience@1.18.2
@logto/experience@1.19.0
@logto/experience@1.19.1
@logto/experience@1.19.2
@logto/experience@1.2.0
@logto/experience@1.2.1
@logto/experience@1.3.0
@logto/experience@1.4.0
@logto/experience@1.5.0
@logto/experience@1.6.0
@logto/experience@1.6.1
@logto/experience@1.6.2
@logto/experience@1.7.0
@logto/experience@1.8.0
@logto/experience@1.9.0
@logto/integration-tests@1.*
@logto/integration-tests@1.1.0
@logto/integration-tests@1.10.0
@logto/integration-tests@1.11.0
@logto/integration-tests@1.11.1
@logto/integration-tests@1.12.0
@logto/integration-tests@1.13.0
@logto/integration-tests@1.13.1
@logto/integration-tests@1.14.0
@logto/integration-tests@1.15.0
@logto/integration-tests@1.16.0
@logto/integration-tests@1.17.0
@logto/integration-tests@1.18.0
@logto/integration-tests@1.19.0
@logto/integration-tests@1.20.0
@logto/integration-tests@1.21.0
@logto/integration-tests@1.3.0
@logto/integration-tests@1.4.0
@logto/integration-tests@1.4.1
@logto/integration-tests@1.4.2
@logto/integration-tests@1.4.3
@logto/integration-tests@1.5.0
@logto/integration-tests@1.6.0
@logto/integration-tests@1.6.1
@logto/integration-tests@1.7.0
@logto/integration-tests@1.8.0
@logto/integration-tests@1.9.0
@logto/language-kit@1.*
@logto/language-kit@1.0.0
@logto/language-kit@1.0.0-beta.29
@logto/language-kit@1.0.0-beta.30
@logto/language-kit@1.0.0-rc.0
@logto/language-kit@1.1.0
@logto/language-kit@1.1.1
@logto/language-kit@1.1.2
@logto/language-kit@1.1.3
@logto/language-kit@1.2.0
@logto/language-kit@1.3.0
@logto/phrases-account-center@0.*
@logto/phrases-account-center@0.1.0
@logto/phrases-experience@1.*
@logto/phrases-experience@1.10.0
@logto/phrases-experience@1.10.1
@logto/phrases-experience@1.11.0
@logto/phrases-experience@1.12.0
@logto/phrases-experience@1.12.1
@logto/phrases-experience@1.12.2
@logto/phrases-experience@1.13.0
@logto/phrases-experience@1.13.1
@logto/phrases-experience@1.13.2
@logto/phrases-experience@1.13.3
@logto/phrases-experience@1.2.0
@logto/phrases-experience@1.3.0
@logto/phrases-experience@1.3.1
@logto/phrases-experience@1.4.0
@logto/phrases-experience@1.5.0
@logto/phrases-experience@1.6.0
@logto/phrases-experience@1.6.1
@logto/phrases-experience@1.7.0
@logto/phrases-experience@1.8.0
@logto/phrases-experience@1.9.0
@logto/phrases-experience@1.9.1
@logto/phrases-ui@1.*
@logto/phrases-ui@1.0.0-beta.13
@logto/phrases-ui@1.0.0-beta.17
@logto/phrases-ui@1.0.0-rc.0
@logto/phrases-ui@1.1.0
@logto/phrases-ui@1.2.0
@logto/phrases@1.*
@logto/phrases@1.0.0-beta.16
@logto/phrases@1.0.0-beta.17
@logto/phrases@1.0.0-rc.0
@logto/phrases@1.1.0
@logto/phrases@1.10.0
@logto/phrases@1.10.1
@logto/phrases@1.11.0
@logto/phrases@1.12.0
@logto/phrases@1.13.0
@logto/phrases@1.14.0
@logto/phrases@1.14.1
@logto/phrases@1.15.0
@logto/phrases@1.16.0
@logto/phrases@1.17.0
@logto/phrases@1.18.0
@logto/phrases@1.19.0
@logto/phrases@1.2.0
@logto/phrases@1.20.0
@logto/phrases@1.21.0
@logto/phrases@1.22.0
@logto/phrases@1.23.0
@logto/phrases@1.24.0
@logto/phrases@1.25.0
@logto/phrases@1.26.0
@logto/phrases@1.27.0
@logto/phrases@1.28.0
@logto/phrases@1.4.0
@logto/phrases@1.4.1
@logto/phrases@1.5.0
@logto/phrases@1.6.0
@logto/phrases@1.7.0
@logto/phrases@1.8.0
@logto/phrases@1.9.0
@logto/schemas@1.*
@logto/schemas@1.0.0-beta.13
@logto/schemas@1.0.0-beta.17
@logto/schemas@1.0.0-rc.0
@logto/schemas@1.0.1
@logto/schemas@1.1.0
@logto/shared@1.*
@logto/shared@1.0.0-beta.16
@logto/shared@1.0.0-beta.17
@logto/shared@1.0.0-rc.0
@logto/shared@1.0.1
@logto/shared@1.0.3
@logto/shared@2.*
@logto/shared@2.0.0
@logto/shared@2.0.1
@logto/shared@3.*
@logto/shared@3.0.0
@logto/shared@3.1.0
@logto/shared@3.1.1
@logto/shared@3.1.2
@logto/shared@3.1.3
@logto/shared@3.1.4
@logto/shared@3.2.0
@logto/shared@3.3.0
@logto/shared@3.3.1
@logto/shared@3.4.0
@logto/translate@0.*
@logto/translate@0.0.0
@logto/translate@0.1.0
@logto/translate@0.1.1
@logto/translate@0.1.2
@logto/translate@0.1.3
@logto/translate@0.2.0
@logto/translate@0.2.1
@logto/translate@0.2.10
@logto/translate@0.2.11
@logto/translate@0.2.12
@logto/translate@0.2.13
@logto/translate@0.2.14
@logto/translate@0.2.2
@logto/translate@0.2.3
@logto/translate@0.2.4
@logto/translate@0.2.5
@logto/translate@0.2.6
@logto/translate@0.2.7
@logto/translate@0.2.8
@logto/translate@0.2.9
@logto/tunnel@0.*
@logto/tunnel@0.0.0
@logto/tunnel@0.1.0
@logto/tunnel@0.2.0
@logto/tunnel@0.2.1
@logto/tunnel@0.2.2
@logto/tunnel@0.2.3
@logto/tunnel@0.2.4
@logto/tunnel@0.2.5
@logto/tunnel@0.2.6
@logto/tunnel@0.3.0
@logto/tunnel@0.3.1
@logto/tunnel@0.3.2
@logto/tunnel@0.3.3
@logto/tunnel@0.3.4
@logto/tunnel@0.3.5
@logto/tunnel@0.3.6
@logto/tunnel@0.3.7
@logto/tunnel@0.3.8
@logto/ui@1.*
@logto/ui@1.1.0
@logto/ui@1.1.1
@logto/ui@1.1.2
@logto/ui@1.1.3
@logto/ui@1.1.4
@logto/ui@1.1.5
Other
pr-8884-screenshots-1779947396
v0.*
v0.1.0-internal
v0.1.1-alpha.0
v0.1.2-alpha.0
v0.1.2-alpha.1
v0.1.2-alpha.2
v0.1.2-alpha.3
v0.1.2-alpha.4
v0.1.2-alpha.5
v1.*
v1.0.0
v1.0.0-alpha.0
v1.0.0-alpha.1
v1.0.0-alpha.2
v1.0.0-alpha.3
v1.0.0-alpha.4
v1.0.0-beta.0
v1.0.0-beta.1
v1.0.0-beta.10
v1.0.0-beta.11
v1.0.0-beta.12
v1.0.0-beta.13
v1.0.0-beta.18
v1.0.0-beta.2
v1.0.0-beta.3
v1.0.0-beta.4
v1.0.0-beta.5
v1.0.0-beta.6
v1.0.0-beta.8
v1.0.0-beta.9
v1.0.0-rc.0
v1.0.0-rc.1
v1.0.0-rc.2
v1.0.1
v1.0.2
v1.1.0
v1.10.0
v1.10.1
v1.11.0
v1.12.0
v1.13.0
v1.13.1
v1.14.0
v1.15.0
v1.16.0
v1.17.0
v1.18.0
v1.19.0
v1.2.0
v1.2.1
v1.2.2
v1.2.3
v1.20.0
v1.21.0
v1.22.0
v1.23.0
v1.23.1
v1.24.0
v1.24.1
v1.25.0
v1.26.0
v1.27.0
v1.28.0
v1.29.0
v1.3.0
v1.30.1
v1.31.0
v1.32.0
v1.33.0
v1.34.0
v1.35.0
v1.36.0
v1.37.0
v1.37.1
v1.38.0
v1.39.0
v1.40.0
v1.40.1
v1.5.0
v1.6.0
v1.7.0
v1.8.0
v1.9.0
v1.9.1
v1.9.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63188.json"