—
GO-2024-3160
Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos
Quick fix
GO-2024-3160 — github.com/ory/kratos: upgrade to the fixed version with the command below.
go get github.com/ory/kratos@v1.3.0Details
Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos
Are you affected?
Enter the version of the package you're using.