Filtered by vendor Heroiclabs Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-2321 1 Heroiclabs 1 Nakama 2022-07-14 9.8 Critical
Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.
CVE-2022-2306 1 Heroiclabs 1 Nakama 2022-07-14 7.5 High
Old session tokens can be used to authenticate to the application and send authenticated requests.