Heroiclabs Nakama
2 CVEs affecting Heroiclabs Nakama. Latest disclosed: 2022-07-05. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2321 | Critical | 9.8 | 2022-07-05 | Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks. |
CVE-2022-2306 | High | 7.5 | 2022-07-05 | Old session tokens can be used to authenticate to the application and send authenticated requests. |