Headline
GHSA-xv59-gc3r-rf92: Insufficient Session Expiration in Nakama
Old session tokens can be used to authenticate to the application and send authenticated requests.
Insufficient Session Expiration in Nakama
High severity GitHub Reviewed Published Jul 6, 2022 • Updated Jul 6, 2022
Related news
CVE-2022-2306: Correctly console session token on all logouts. (#875) · heroiclabs/nakama@ce8d392
Old session tokens can be used to authenticate to the application and send authenticated requests.