Jeremyevans

4 CVEs in 1 Jeremyevans product, including Rodauth. Newest: CVE-2026-82470 (2026-08-29). Severity, EPSS and public exploits for each.

Jeremyevans products with known CVEs

ProductCVEs
Rodauth4
Jeremyevans CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-82470Medium5.42026-08-29Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Atta…
CVE-2026-82469Medium5.42026-08-29Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwt_refresh route that issues new JWT access tokens without requiring a refresh to…
CVE-2026-82468Medium4.72026-08-29Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cr…
CVE-2026-82467Medium4.72026-08-29Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirm_password, login_return_to_requested_location, and two_factor_auth_return_t…