@fastify/passport@1.0.0 vulnerabilities
Simple, unobtrusive authentication for Fastify.
-
latest version
2.5.0
-
latest non vulnerable version
-
first published
2 years ago
-
latest version published
3 months ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the @fastify/passport package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
@fastify/passport is a Simple, unobtrusive authentication for Fastify. Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF). CSRF protection is implemented using a synchronizer token pattern, by storing a random value used for CSRF token generation in the How to fix Cross-site Request Forgery (CSRF)? Upgrade |
<1.1.0
>=2.0.0 <2.3.0
|
@fastify/passport is a Simple, unobtrusive authentication for Fastify. Affected versions of this package are vulnerable to Session Fixation. How to fix Session Fixation? Upgrade |
<1.1.0
>=2.0.0 <2.3.0
|