logto-io/logto
master@ c814034
Fixes13
CVEs13
Peak severityHigh
Commits8,313
Regression coverage27.3%
Highlights
Information Disclosure: 3 prior fixes. Scrutinize any change in this area.
packages/core/src/oidc/grants/token-exchange/account.ts: most-fixed (2 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authorization Bypass: 1 historical fix(es) link packages/core/src/routes/account/email-and-phone.ts to Authorization Bypass.
Authorization Bypass: 1 historical fix(es) link packages/core/src/oidc/grants/token-exchange/account.ts to Authorization Bypass.
Cross-Site Scripting: 1 historical fix(es) link packages/core/src/middleware/koa-experience-ssr.ts to Cross-Site Scripting.
Last analyzed 7 Oct 2026, 05:05 UTC