CVE-2022-25896

Published July 1st, 2022

View on NVD ↗

CVSS v3

4.8

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

1

PROJECT

Description

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

jaredhanson/passport

Simple, unobtrusive authentication for Node.js.

GitHub

23.5K