Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-27508
7.5
HIGHCVSS v3
Published
December 11, 2020
CVSS v2
5 MEDIUM
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security.
frappe/frappe
GitHubLow code web framework for real world applications, in Python and Javascript
GitHubLow code web framework for real world applications, in Python and Javascript< 12.10.0NVD
FrappeNuGet GalleryThe core implementation library for Frappe. Frappe is a compile time bundler for JavaScript, Css, and Less for high volume, high performance ASP.NET sites.
NuGet GalleryThe core implementation library for Frappe. Frappe is a compile time bundler for JavaScript, Css, and Less for high volume, high performance ASP.NET sites.< 12.10.0NVD
Crates.io
NPM