Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

rubygems

devise-two-factor

rubygems

Devise-Two-Factor is a minimalist extension to Devise which offers support for two-factor authentication through the TOTP scheme.

View on github.com · View on rubygems.org

Security Advisories for devise-two-factor in rubygems

Moderate
about 1 year ago

Devise-Two-Factor Authentication Uses Insufficient Default OTP Shared Secret Length GSA_kwCzR0hTQS1xanhmLW1jNzItd2pyMs4AA_nR

rubygems devise-two-factor
Moderate
over 3 years ago

Improper one time password handling in devise-two-factor GSA_kwCzR0hTQS1qbTM1LWg4cTItNzNtcM05RA

rubygems devise-two-factor
Moderate
about 7 years ago

Tinfoil Devise-two-factor does not "burn" a successfully validated one-time password (OTP) MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg0ODktamp3bS01Mmc3

rubygems devise-two-factor

Filter by Severity

Moderate 3