devise-two-factor vulnerabilities (RubyGems)

3 vulnerabilities.

• devise-two-factor RubyGems Insufficient Default OTP Shared Secret Length CVE-2024-8796 Fix available 6.0 MediumSeptember 17, 2024
• devise-two-factor RubyGems Improper one time password handling in devise-two-factor CVE-2021-43177 Fix available 5.3 MediumApril 7, 2022
• devise-two-factor RubyGems Tinfoil Devise-two-factor does not "burn" a successfully validated one-time password (OTP) CVE-2015-7225 Fix available 5.3 MediumSeptember 6, 2017