Debian/passportjs: medium 4.8
This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.
Action: Upgrade passportjs to 0.6.0+~1.0.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0+~1.0.0-1 | - |
Fixed versions
| 0.6.0+~1.0.0-1 |
Sources
- osv: DEBIAN-CVE-2022-25896#Debian:14/passportjs
- https://security-tracker.debian.org/tracker/CVE-2022-25896
published · modified · JSON