| Package | Affected versions | Patched versions |
|---|---|---|
| passport | = 2.2.5= 2.4.0 |
Envoy Passport for Android and Envoy Passport for iPhone could allow a local attacker to obtain sensitive information, caused by the storing of unencrypted data in logs. An attacker could exploit this vulnerability to obtain two API keys, a token and other sensitive information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free