Advisories · Weakness
Every Advisory and CVE whose sources give the weakness CWE-1466, newest first.
AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password change
>=4.5.0, <4.15.1 || >=5.0.0-rc.0, <5.0.0-rc.16 · fixed in 4.15.1, 5.0.0-rc.16
