EUVD-2025-24034

Malicious code in bioql PyPI...

PT-2025-32382 · Openbao · Openbao

Name of the Vulnerable Software and Affected Versions: OpenBao versions 0.1.0 through 2.3.1 Description: OpenBao’s TOTP secrets engine could accept valid Time-based One-Time Password TOTP codes multiple times instead of strictly once. This issue stemmed from unexpected normalization within the...