heroiclabs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

heroiclabs records in CISA KEV

No heroiclabs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-02144 CVE-2022-2321 · GHSA-8r94-4h3c-939f

MEDIUM 45

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01581 Published 2022-07-05 Fixed in 3.13.0 CWE-307

TI-2022-02129 CVE-2022-2306 · GHSA-xv59-gc3r-rf92

LOW 35

Old session tokens can be used to authenticate to the application and send authenticated requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00881 Published 2022-07-05 Fixed in 3.13.0 CWE-613