Skip to content
OpenAdvisories

Package · Go

github.com/daptin/daptin

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    GHSA-258c-965c-p3hc

    Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change

    ### Summary A session invalidation vulnerability exists in daptin's authentication system where JSON Web Tokens (JWTs) remain fully valid after a user changes their password. The JWT validation middleware (`CheckJWT`) only verifies token signature, expiry, is…

    github.com/daptin/daptin Go