https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:25:28.074498+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-12887 CVE-2019-12887 2026-10-08T16:25:28.108506+00:00

KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).

 https://cve.radiocsirt.org/vuln/ghsa-rqg8-xjp2-pg9w GHSA-rqg8-xjp2-pg9w — LinOTP replay vulnerability with auto resynchronization enabled for TOTP token 2026-10-08T16:25:28.108571+00:00

Affected: PyPI: LinOTP

LinOTP is prone to a replay attack with activated automatic resynchronization. This vulnerability may allow an attacker to successfully log in with OTP values recorded at a previous point in time.

This attack is only possible if automatic resynchronization is enabled for the TOTP token type. The automatic resynchronization is deactivated by default. All other tokens are unaffected.