Skip to content
OpenAdvisories
High · 7.5 CVE-2022-2321 EUVD-2022-6295GHSA-8r94-4h3c-939f

Improper Restriction of Excessive Authentication Attempts in heroiclabs/nakama

Published Jul 5, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Description

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.

Affected products

VendorProductAffectedFixed
heroiclabs heroiclabs/nakama unspecified – < 3.13.0 3.13.0

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/heroiclabs/nakama/v3 <= 3.12.0 — GHSA-8r94-4h3c-939f

References