Skip to content
OpenAdvisories

Package · Go

github.com/ory/kratos

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2024-45042

    Ory Kratos's `highest_available` setting does not properly respect code + mfa credentials

    Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a number of preconditions, the `highest_available` setting will incorrectly assume that the identity’s highest available AAL is `aal1` even …

    ory kratos github.com/ory/kratos Go