Skip to content
OpenAdvisories

Vendor

hail-is

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    Hail authentication can be bypassed by changing email address

    Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect (OIDC) email addresses from ID tokens to verify the validity of a user's domain, but b…