https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:23:47 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-20989 cnvd-2018-20989 https://cve.radiocsirt.org/vuln/cnvd-2018-20989 https://cve.radiocsirt.org/vuln/euvd-2026-175069 EUVD-2026-175069 https://cve.radiocsirt.org/vuln/euvd-2026-175069 https://cve.radiocsirt.org/vuln/fkie_cve-2015-9240 <p>Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in.</p> <p>Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-9240 https://cve.radiocsirt.org/vuln/ghsa-39pj-gq8q-9pfj <p><strong>Affected:</strong> npm: keystone</p> <p>Versions of `keystone` prior to 0.3.16 are affected by a partial authentication bypass vulnerability. In the default sign in functionality, if an attacker provides a full and correct password, yet only provides part of the associated email address, authentication will be granted.</p> <p>## Recommendation</p> <p>Update to version 0.3.16 or later.</p> <p><strong>Affected:</strong> npm: keystone</p> <p>Versions of `keystone` prior to 0.3.16 are affected by a partial authentication bypass vulnerability. In the default sign in functionality, if an attacker provides a full and correct password, yet only provides part of the associated email address, authentication will be granted.</p> <p>## Recommendation</p> <p>Update to version 0.3.16 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-39pj-gq8q-9pfj https://cve.radiocsirt.org/vuln/gsd-2015-9240 gsd-2015-9240 https://cve.radiocsirt.org/vuln/gsd-2015-9240