Logto vulnerabilities
Products
- Logto 6
Newest
- logto Unverified email-based SSO account linking 9.1 Critical
- logto LOIDC nonce validation bypass 9.1 Critical
- logto IdP-initiated SAML sessions not reliably invalidated (replay) 7.5 High
- logto SAML <Conditions> element not validated 7.5 High
- logto Local MFA not enforced during SSO sign-in 9.1 Critical
- logto Principal/domain lookup without case normalization 9.1 Critical