2 known security vulnerabilities
- moderateGHSA-jm35-h8q2-73mp(CVE-2021-43177)
Improper one time password handling in devise-two-factor
Show 1 more vulnerabilityShow fewer vulnerabilities1 moderate
- moderateGHSA-qjxf-mc72-wjr2(CVE-2024-8796)
Devise-Two-Factor Authentication Uses Insufficient Default OTP Shared Secret Length
Barebones two-factor authentication with Devise
Required Ruby Version
>= 0
Authors
Shane Wilton
Versions
-
6.4.1
-
source
- 6.4.1 source September 03, 2026 (24.5 KB)
-
-
6.4.0
-
source
- 6.4.0 source February 02, 2026 (24 KB)
-
-
6.3.1
-
source
- 6.3.1 source January 22, 2026 (24 KB)
-
-
6.3.0
-
source
- 6.3.0 source January 08, 2026 (24 KB)
-
-
6.2.0
-
source
- 6.2.0 source October 22, 2025 (23.5 KB)
-
-
4.0.0
-
source
- 4.0.0 source April 08, 2021 (28.5 KB) vulnerable
-
