Skip to content
OpenAdvisories

Package · npm

loopback

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-8wgc-jjvv-cv6v

    Improper Authorization in loopback

    Vulnerable versions of `loopback` may allow attackers to create Authentication Tokens on behalf of other users due to Improper Authorization. If the AccessToken model is publicly exposed, an attacker can create Authorization Tokens for any user as long as the…

    loopback npm