MAL-2024-5425 Malicious code in oauth20-api (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oauth-less (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5424 Malicious code in oauth-less (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in microsoftoauth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Zendesk.OAuth (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2779 Malicious code in oauth-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...

Malicious code in oauth-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49c48193ba50bb4ead1e212925eab8873e7e4ad7fa834d41e7626bb4e5036f3 package.json declares a preinstall: node index.js hook that fires automatically on npm install. index.js collects installer-side data — os.hostname,...

Malicious code in oauth-connect-popup (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2780 Malicious code in oauth-connect-popup (npm)

--- -= Per source details. Do not edit below this line.=-...

Fedora: Security Advisory (FEDORA-2024-2e9c58d661)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: python-authlib-1.3.1-1.fc39

Python library for building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are included...

Fedora: Security Advisory (FEDORA-2024-7cc9a030d9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: python-authlib-1.3.1-1.fc40

Python library for building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are included...

Improper Authentication

Firefly III is vulnerable to an Improper Authentication. The vulnerability is due to a flaw in the Firefly III OAuth flow, which may allow malicious users to bypass the MFA check, enabling them to gain access using passwords stolen from other sources through password spraying...

PocketBase Security Vulnerability

PocketBase is an open source real-time backend for PocketBase Open Source. A security vulnerability exists in Pocketbase versions prior to 0.22.14, which stems from password validation and OAuth2 unverified email links...

This Week in Spring - June 18th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! I've just come from Paris, France, and now I'm in equally beautiful Krakow, Poland, for the amazing Devoxx PL event. We've got a ton of good stuff to dive into, so let's get going! In last week's installment of Spring Tips, I...

Firefly III has a MFA bypass in oauth flow

Impact A MFA bypass in the Firefly III OAuth flow may allow malicious users to bypass the MFA-check. This allows malicious users to use password spraying to gain access to your Firefly III data using passwords stolen from other sources. As OAuth applications are easily enumerable using an...

GHSA-4GM4-C4MH-4P7W Firefly III has a MFA bypass in oauth flow

Impact A MFA bypass in the Firefly III OAuth flow may allow malicious users to bypass the MFA-check. This allows malicious users to use password spraying to gain access to your Firefly III data using passwords stolen from other sources. As OAuth applications are easily enumerable using an...

CVE-2024-37893

Firefly III is a free and open source personal finance manager. In affected versions an MFA bypass in the Firefly III OAuth flow may allow malicious users to bypass the MFA-check. This allows malicious users to use password spraying to gain access to Firefly III data using passwords stolen from...

CVE-2024-37893 MFA bypass in oauth flow in Firefly III

Firefly III is a free and open source personal finance manager. In affected versions an MFA bypass in the Firefly III OAuth flow may allow malicious users to bypass the MFA-check. This allows malicious users to use password spraying to gain access to Firefly III data using passwords stolen from...