logto-io logto

• CVE-2026-56739 High 8.5 Logto: SSRF via Webhooks and Custom OAuth2 Connector UserInfo Endpoint 0.3%
• CVE-2026-63203 High 7.6 Logto: Account API can disclose stored third-party provider tokens without the identities scope 0.3%
• CVE-2026-82263 Medium 6.8 Logto Server-Side Request Forgery via OIDC SSO Connector Issuer URL 0.5%
• CVE-2026-82262 Medium 6.8 Logto Server-Side Request Forgery via webhook test endpoint 0.5%
• CVE-2026-63187 Medium 6.3 Logto: OS command injection vulnerability exists in the Commitlint workflow 0.4%
• CVE-2026-63188 High 8.7 logto-tunnel serves files outside --experience-path via path traversal 0.5%
• CVE-2026-62317 High 7.5 Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing) 0.7%
• CVE-2026-55377 High 8.1 Logto: Account Center MFA management step-up bypass via WebAuthn registration verification 0.4%
• CVE-2026-55370 Medium 6.4 Logto: TOTP code can be replayed within the RFC 6238 validity window (one-time use violation) 0.3%
• CVE-2026-55789 High 8.5 Logto: SAML IdP injects user-controlled profile attributes raw into signed assertions, allowing privilege escalation at relying Service Providers 0.3%
• CVE-2026-54714 Medium 6.1 Logto: XSS via unescaped RelayState in SAML auto-submit form 0.3%