Most recent entries from all

EUVD-2026-166861

fkie_cve-2022-25896

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

GHSA-v923-w3x8-wh69 — Passport vulnerable to session regeneration when a users logs in or out

Affected: npm: passport

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

gsd-2022-25896

RHSA-2022:7313 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.6.2 security update and bug fixes

search-api: SQL injection leads to remote denial of service terser: insecure use of regular expressions leads to ReDoS sanitize-html: insecure global regular expression replacement logic may lead to ReDoS passport: incorrect session regeneration moment: inefficient parsing algorithm resulting in DoS

UBUNTU-CVE-2022-25896

Affected: Ubuntu:16.04:LTS: passportjs, Ubuntu:18.04:LTS: passportjs, Ubuntu:20.04:LTS: passportjs, Ubuntu:22.04:LTS: passportjs

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

WID-SEC-W-2022-2368 — HCL BigFix: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in HCL BigFix ausnutzen, um die Verfügbarkeit, die Vertraulichkeit und die Integrität zu gefährden.