Authcrunch vulnerabilities
We track 2 vulnerabilities in Authcrunch products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 17, 2024.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Authcrunch vulnerabilities
- 9.8 Critical severity
github.com/greenpau/caddy-security: Use of Insufficiently Random Values
Versions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure random number generation library which could possibly be predicted via a brute-force search. Attackers could use the potenti
- 8.1 High severity
All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient…
All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign Out" button. User sessions remain valid even after requests are sent to /logout a