EUVD-2021-28239

Malicious code in bioql PyPI...

CVE-2021-41100 Account takeover when having only access to a user's short lived token in wire-server

Wire-server is the backing server for the open source wire secure messaging application. In affected versions it is possible to trigger email address change of a user with only the short-lived session token in the Authorization header. As the short-lived token is only meant as means of...