kanidm
Rust / Cargo · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Kanidm: Stored HTML injection in "passkey-enrolment" partial via displayname → htmx-driven authenticated request forgery | kanidm | Rust / Cargo | Medium | Fix reported | |
| Kanidm has non-constant-time comparison of OAuth2 client_secret | kanidm | Rust / Cargo | Low | Fix reported |