Vendor

heroiclabs

2 known vulnerabilities.

Products

heroiclabs/nakama 2

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2022-2321

Improper Restriction of Excessive Authentication Attempts in heroiclabs/nakama

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.

heroiclabs heroiclabs/nakama github.com/heroiclabs/nakama/v3 Go

Jul 5, 2022
High 8.2

CVE-2022-2306

Insufficient Session Expiration in heroiclabs/nakama

Old session tokens can be used to authenticate to the application and send authenticated requests.

heroiclabs heroiclabs/nakama github.com/heroiclabs/nakama Go

Jul 5, 2022