| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/h44z/wg-portal | ≥ 2.0.0-alpha.1, < 2.0.0-alpha.3 | 2.0.0-alpha.3 |
Users of WireGuard Portal v2 who have OAuth (or OIDC) authentication backends enabled can be affected by an Account Takeover vulnerability if they visit a malicious website.
The problem was fixed in the latest alpha release, v2.0.0-alpha.3. The docker images for the tag 'latest' built from the master branch also include the fix.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free