Skip to content
OpenAdvisories

Package · Ubuntu

yubikey-val

2 known vulnerabilities.

2 results · Feed

  • Unscored —

    The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows rem…

  • Unscored —

    The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue i…