Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-9240
Description
Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in.
keystonejs/keystone
GitHubThe superpowered headless CMS for Node.js — built with GraphQL and React
GitHubThe superpowered headless CMS for Node.js — built with GraphQL and React< 0.3.16NVD
openstack/keystoneGitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.
GitHubOpenStack Identity (Keystone). Mirror of code maintained at opendev.org.< 0.3.16NVD