| Package | Affected versions | Patched versions |
|---|---|---|
| conduit | < 0.8.0 | 0.8.0 |
Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any server in most EDUs
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free