Advisories · Technology
jeremyevans rodauth.
Every CVE that names jeremyevans rodauth among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Rodauth before 2.47.0 TOTP Code Reuse via Drift Window
- jeremyevans rodauth
- Authentication bypass
- CVSS 5.1 Medium
Rodauth before 2.47.0 Authentication Bypass via jwt_refresh
- jeremyevans rodauth
- Authentication bypass
- CVSS 4.9 Medium
Rodauth before 2.47.0 CSRF Protection Bypass via Content-Type
- jeremyevans rodauth
- Cross-site request forgery (CSRF)
- CVSS 4.9 Medium
Rodauth before 2.47.0 Open Redirect via Return-to Path
- jeremyevans rodauth
- Open redirect
- CVSS 9.4 CriticalCritical · CVSS 9+
Rodauth before 2.46.0 Authentication Bypass via webauthn_login
- jeremyevans rodauth
- Authentication bypass