All products

devise-two-factor

RubyGems · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Improper one time password handling in devise-two-factorCVE-2021-43177 · GHSA-JM35-H8Q2-73MP devise-two-factor RubyGems Medium Fix reported
Tinfoil Devise-two-factor does not "burn" a successfully validated one-time password (OTP)CVE-2015-7225 · GHSA-X489-JJWM-52G7 devise-two-factor RubyGems Medium Fix reported
Devise-Two-Factor Authentication Uses Insufficient Default OTP Shared Secret LengthCVE-2024-8796 · GHSA-QJXF-MC72-WJR2 devise-two-factor RubyGems Medium Fix reported