https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:37:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-206337 EUVD-2026-206337 https://cve.radiocsirt.org/vuln/euvd-2026-206337 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21492 <p>All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the &#34;Sign Out&#34; button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers who gain access to an active but supposedly logged-out session can perform unauthorized actions on behalf of the user.</p> <p>All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the &#34;Sign Out&#34; button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers who gain access to an active but supposedly logged-out session can perform unauthorized actions on behalf of the user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-21492 https://cve.radiocsirt.org/vuln/ghsa-vp66-gf7w-9m4x <p><strong>Affected:</strong> Go: github.com/greenpau/caddy-security</p> <p>All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the &#34;Sign Out&#34; button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers who gain access to an active but supposedly logged-out session can perform unauthorized actions on behalf of the user.</p> <p><strong>Affected:</strong> Go: github.com/greenpau/caddy-security</p> <p>All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the &#34;Sign Out&#34; button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers who gain access to an active but supposedly logged-out session can perform unauthorized actions on behalf of the user.</p> https://cve.radiocsirt.org/vuln/ghsa-vp66-gf7w-9m4x https://cve.radiocsirt.org/vuln/gsd-2024-21492 gsd-2024-21492 https://cve.radiocsirt.org/vuln/gsd-2024-21492