Skip to content
OpenAdvisories

Package · npm

otpauth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-rmmc-8cqj-hfp3

    Authentication Bypass in otpauth

    Versions of `otpauth` prior to 3.2.8 are vulnerable to Authentication Bypass. The package's `totp.validate()` function may return positive values for single digit tokens even if they are invalid. This may allow attackers to bypass the OTP authentication by pr…

    otpauth npm