Skip to content
OpenAdvisories

Package · npm

loopback

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low —
    GHSA-724c-6vrf-99rq

    Sensitive Data Exposure in loopback

    Versions of `loopback` prior to 3.26.0 (3.x) and 2.42.0 (2.x) are vulnerable to Sensitive Data Exposure. Invalid API requests to the login endpoint may return information about the first user in the database. This can be used alongside other attacks for crede…

    loopback npm
  • High —
    GHSA-8wgc-jjvv-cv6v

    Improper Authorization in loopback

    Vulnerable versions of `loopback` may allow attackers to create Authentication Tokens on behalf of other users due to Improper Authorization. If the AccessToken model is publicly exposed, an attacker can create Authorization Tokens for any user as long as the…

    loopback npm