Skip to content
OpenAdvisories

Package · Debian

ruby-rodauth

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-82466

    Rodauth before 2.46.0 Authentication Bypass via webauthn_login

    Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in users to authenticate as any other account. Attackers can exploit improper account resolution logic that falls back to session account iden…

    jeremyevans rodauth ruby-rodauth ruby-rodauth Debian Ubuntu