| Package | Affected versions | Patched versions |
|---|---|---|
| passwork | < 6.2.0 | 6.2.0 |
Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free