[ Vendor · 2 CVEs ]

logto-io

CVEs affecting logto-io published in the last 30 days, plus any logto-io CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-63203 24 Sep 2026 CVSS 7.6 logto-io logtoLogto is the modern, open-source auth infrastructure for SaaS and AI apps. From 1.31.0 until 1.42.0, the Account API handlers in…
CVE-2026-56739 24 Sep 2026 CVSS 8.5 logto-io logtoLogto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound…