https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:27:28.932117+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-22835 cnvd-2019-22835 2026-10-08T16:27:28.935487+00:00 cnvd-2019-22835 https://cve.radiocsirt.org/vuln/euvd-2026-55349 EUVD-2026-55349 2026-10-08T16:27:28.935520+00:00 EUVD-2026-55349 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12887 fkie_cve-2019-12887 2026-10-08T16:27:28.935535+00:00

KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).

 https://cve.radiocsirt.org/vuln/ghsa-rqg8-xjp2-pg9w GHSA-rqg8-xjp2-pg9w — LinOTP replay vulnerability with auto resynchronization enabled for TOTP token 2026-10-08T16:27:28.935562+00:00

Affected: PyPI: LinOTP

LinOTP is prone to a replay attack with activated automatic resynchronization. This vulnerability may allow an attacker to successfully log in with OTP values recorded at a previous point in time.

This attack is only possible if automatic resynchronization is enabled for the TOTP token type. The automatic resynchronization is deactivated by default. All other tokens are unaffected.

 https://cve.radiocsirt.org/vuln/gsd-2019-12887 gsd-2019-12887 2026-10-08T16:27:28.935586+00:00 gsd-2019-12887 https://cve.radiocsirt.org/vuln/pysec-2019-103 PYSEC-2019-103 2026-10-08T16:27:28.935606+00:00

Affected: PyPI: linotp

KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).