Security Advisories - scheb/two-factor-bundle - Packagist

scheb/two-factor-bundle Security Advisories for v3.0.0-beta1 (2)

Vulnerability to bypass two-factor authentication with remember-me option

PKSA-fzh9-hxqm-sgs7

Affected version: >=4.0.0,<4.11.0|>=3.0.0,<3.26.0|>=0.0.0,<3.0.0

Reported by:
FriendsOfPHP/security-advisories
Vulnerability to bypass two-factor authentication with unverified JWT trusted device token

PKSA-wk7g-q55p-55xx

Affected version: >=3.0.0,<3.7.0

Reported by:
FriendsOfPHP/security-advisories