| Package | Affected versions | Patched versions |
|---|---|---|
| data.all | ≥ 1.0.0, < 2.6.1 | 2.6.1 |
Authentication tokens issued via Cognito in data.all are not invalidated on log out, allowing for previously authenticated user to continue execution of authorized API Requests until token is expired.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free