gibbon vulnerabilities

CVEs whose affected-version data names the gibbon package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2022-27305High· 8.8

Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.

Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.

▾ Twilightgibbonedu · gibbonEPSS 0.92%via NVD

gibbon vulnerabilities (CVEs) · VulnSea