Descripción
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SDK onboarding path for mobile apps that have no backend of their own: a developer generates a code via the authenticated dashboard endpoint, the user types it into the app, and it-s redeemed for SDK-scoped tokens.
CVSS 7.3EPSS 0.40499999999999997%Riesgo 0.76
Ver fuente- Publicación
- 2026-08-24 00:16:47
- Versiones afectadas
- <=0.6.2
- Tipo
- Aplicación web
- Última modificación
- 2026-08-25 09:17:35
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L