Tinfoilsecurity Devise-two-factor vulnerabilities

• devise-two-factor Insufficient Default OTP Shared Secret Length CVE-2024-8796 Fix available 6.0 MediumSeptember 17, 2024
• devise-two-factor Improper one time password handling in devise-two-factor CVE-2021-43177 Fix available 5.3 MediumApril 7, 2022
• tinfoilsecurity devise-two-factor Tinfoil Devise-two-factor does not "burn" a successfully validated one-time password (OTP) CVE-2015-7225 Fix available 5.3 MediumSeptember 6, 2017