Skip to content
OpenAdvisories

Package · crates.io

kanidm

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.7
    GHSA-53hj-r94p-8c8f

    Kanidm has non-constant-time comparison of OAuth2 client_secret

    ### Summary The kanidmd OAuth2 token-exchange (`/oauth2/token`) and token-introspection (`/oauth2/token/introspect`) endpoints compare the supplied `client_secret` against the stored secret using Rust's `PartialEq` on `String`, which short-circuits on the fir…

    kanidm crates.io
  • Medium 6.1
    GHSA-gpxg-fx2g-qxj2

    Kanidm: Stored HTML injection in "passkey-enrolment" partial via displayname → htmx-driven authenticated request forgery

    ### Summary The kanidmd web UI renders the WebAuthn passkey-registration challenge as raw JSON inside an inline `<script id="data">` element using the Askama `|safe` filter. The challenge embeds the account's `displayname`, which `serde_json` serialises witho…

    kanidm crates.io