In addition to major versions listed below, the main branch is also supported for security fixes.
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
To report a vulnerability, our Gitlab issue tracker can be used as Gitlab supports confidential issues.
Security: CentauriSolutions/EyeDP
Security
SECURITY.md
-
TOTP can be brute forcedGHSA-qrqh-v2j6-3g7w published
Jan 11, 2024 by ChrisMacNaughtonModerate -
It is possible for a user with two different accounts to bypass multifactor authenticationGHSA-jw2v-333v-8m78 published
Nov 22, 2022 by ChrisMacNaughtonLow -
Session Not Invalidated after Inserting Username and PasswordGHSA-x953-v55f-vxg6 published
Feb 5, 2022 by ChrisMacNaughtonLow -
OAuth Resource Owner Password Grant EnabledGHSA-w247-r3xj-79wc published
Jan 29, 2022 by ChrisMacNaughtonLow -
Exposure of Sensitive Information to an Unauthorized Actor in EyeDPGHSA-c7jm-5429-v2pq published
Feb 5, 2022 by ChrisMacNaughtonLow -
Secret Data Exposure - TOTP-related User fieldsGHSA-wwm2-j5mj-ccq2 published
Jan 29, 2022 by ChrisMacNaughtonModerate -
Stored XSS - Liquid templateGHSA-w4c8-gjjh-cwq5 published
Feb 9, 2022 by ChrisMacNaughtonLow -
User can delete their own primary emailGHSA-mqwf-62hv-6jcc published
Jan 29, 2022 by ChrisMacNaughtonLow -
Insertion of Sensitive Information into Log File in EyeDPGHSA-gfcm-jpcv-cgm6 published
Jan 29, 2022 by ChrisMacNaughtonLow -
Authorization Issue - Personal Access TokensGHSA-c9r2-fxx5-99g3 published
Jan 29, 2022 by ChrisMacNaughtonModerate
Learn more about advisories related to CentauriSolutions/EyeDP in the GitHub Advisory Database