high7.5
CVE-2025-3091
An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.
Impact
An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.