Jeremyevans vulnerabilities
We track 1 vulnerability in Jeremyevans products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Jeremyevans vulnerabilities
- 8.7 High severity
rodauth: Improper Authentication
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthn_login route that allows logged-in users to authenticate as any other account. Attackers can exploit improper account resolution logic that falls back to session account ident