| Package | Affected versions | Patched versions |
|---|---|---|
| 1password | ≥ 7.0, < 7.9.3≥ 7.0, < 7.9.5≥ 7.0, < 7.9.6≥ 7.0, < 7.9.829≥ 8.0, < 8.7.1≥ 8.0, < 8.8.0-104≥ 8.0, < 8.8.0-94 | 7.9.37.9.57.9.67.9.8298.7.18.8.0-1048.8.0-94 |
| 1password in the browser | < 2.3.4 | 2.3.4 |
| command-line | ≥ 2.0.0, < 2.3.0 | 2.3.0 |
| command line interface | ≥ 1.0.0, < 1.12.5 | 1.12.5 |
| connect | < 1.5.3 | 1.5.3 |
| scim bridge | < 2.3.2 | 2.3.2 |
An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with the 1Password service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free