ajenti.plugin.core@0.105
Core
latest version
0.114
latest non vulnerable version
first published
11 years ago
latest version published
26 days ago
licenses detected
- [0.1,0.80); [0.89,)
Direct Vulnerabilities
Known vulnerabilities in the ajenti.plugin.core package. This does not include vulnerabilities belonging to this package’s dependencies.
Fix vulnerabilities automatically
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
ajenti.plugin.core is a Core Affected versions of this package are vulnerable to User Impersonation via 2FA authentication. An attacker can gain unauthorized access by bypassing password authentication. How to fix User Impersonation? Upgrade | [,0.112) |
ajenti.plugin.core is a Core Affected versions of this package are vulnerable to Race Condition in the 2FA authentication. An attacker can gain unauthorized access by exploiting a timing issue immediately after user authentication, allowing them to bypass intended security checks. How to fix Race Condition? Upgrade | [,0.112) |