| Package | Affected versions | Patched versions |
|---|---|---|
| obike-stationless bike sharing | = 2.5.4 |
oBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass the locking mechanism by using Bluetooth Low Energy (BLE) to replay ciphertext based on a predictable nonce used in the locking protocol.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free