Skip to content
OpenAdvisories

Package · npm

@redwoodjs/api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    GHSA-3qmc-2r76-4rqp

    Redwood is vulnerable to account takeover via dbAuth "forgot-password"

    # Impact _What kind of vulnerability is it? Who is impacted?_ This is an API vulnerability in Redwood's [dbAuth], specifically the dbAuth forgot password feature: - only projects with the dbAuth "forgot password" feature are affected - this vulnerability was …

    @redwoodjs/api npm