kanidm vulnerabilities (crates.io)

2 vulnerabilities.

• kanidm crates.io Kanidm has non-constant-time comparison of OAuth2 client_secret GHSA-53hj-r94p-8c8f Fix available 3.7 LowMay 6, 2026
• kanidm crates.io Kanidm: Stored HTML injection in "passkey-enrolment" partial via displayname → htmx-driven authenticated request forgery GHSA-gpxg-fx2g-qxj2 Fix available 6.1 MediumMay 6, 2026