CVE-2026-28275

Initiative is a self-hosted project management platform. Versions of the application prior to 0.32.4 do not invalidate previously issued JWT access tokens after a user changes their password. As a result, older tokens remain valid until expiration and can still be used to access protected API...

Initiative code issue vulnerabilities

Initiative is an open-source project management platform developed by Morelitea. Versions of Initiative prior to 0.32.4 contained code vulnerabilities. These vulnerabilities stemmed from a lack of mechanism to invalidate previously issued JWT access tokens after users changed their passwords,...

PT-2025-38232

Name of the Vulnerable Software and Affected Versions: CISA Thorium versions prior to 1.1.1 Description: CISA Thorium does not properly invalidate previously used tokens when resetting passwords. An attacker possessing a previously used token could potentially log in after a password reset...