https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:19:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-00043 bdu:2026-00043 https://cve.radiocsirt.org/vuln/bdu:2026-00043 https://cve.radiocsirt.org/vuln/euvd-2026-261308 EUVD-2026-261308 https://cve.radiocsirt.org/vuln/euvd-2026-261308 https://cve.radiocsirt.org/vuln/fkie_cve-2025-56643 <p>Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a token is compromised. The issue is present in the authentication resolver logic and affects both the GraphQL endpoint and the logout mechanism.</p> <p>Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a token is compromised. The issue is present in the authentication resolver logic and affects both the GraphQL endpoint and the logout mechanism.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-56643 https://cve.radiocsirt.org/vuln/ghsa-523q-32qm-5jpf <p>Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a token is compromised. The issue is present in the authentication resolver logic and affects both the GraphQL endpoint and the logout mechanism.</p> <p>Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a token is compromised. The issue is present in the authentication resolver logic and affects both the GraphQL endpoint and the logout mechanism.</p> https://cve.radiocsirt.org/vuln/ghsa-523q-32qm-5jpf