Skip to content
OpenAdvisories

Vendor

katalyst

1 known vulnerabilities.

Products

koi 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-44511

    Katalyst Koi: Session cookies can be replayed after user logout

    Katalyst Koi is a framework for building Rails admin functionality. Prior to 4.20.0 and 5.6.0, admin session cookies were not invalidated when an admin user logged out. An attacker with access to a valid admin session cookie could continue to access admin fun…

    katalyst koi katalyst-koi RubyGems