What’s Vulnerable › Products

devise-two-factor vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your devise-two-factor version is affected

Latest devise-two-factor vulnerabilities

• CVE-2024-8796 — Insufficient Default OTP Shared Secret Length (CVSS 5.3)
• CVE-2021-43177 — Improper one time password handling in devise-two-factor (CVSS 5.3)
• CVE-2015-7225 — (CVSS 5.3)