GHSA-r8pm-g6v2-5wgx
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
The vulnerability can be described as a failure to invalidate user session upon password change. When running multiple active sessions in separate browser windows, it was observed a password or email address change could be changed without terminating the user session.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: October 5, 2025 6:32 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.