Skip to content
OpenAdvisories

Vendor

roostorg

5 known vulnerabilities.

Products

coop 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-63400

    Coop sessions are not invalidated on password reset

    Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the password row without invalidating database-backed sessions. An attacker who has acquired a password and established a session retains access even…

    roostorg coop