LOW3.7crates.io
GHSA-53hj-r94p-8c8fKanidm has non-constant-time comparison of OAuth2 client_secret
Modified: 5/6/2026
package
crates.io/kanidm
pkg:crates.io/kanidm
MEDIUM6.1crates.io
GHSA-gpxg-fx2g-qxj2Kanidm: Stored HTML injection in "passkey-enrolment" partial via displayname → htmx-driven authenticated request forgery
Modified: 5/6/2026