Known CVE vulnerabilities and GitHub Security Advisories affecting the Hex package pow, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (2)
CVE-2020-5205 — CVSS 6.5 (medium): In Pow (Hex package) before 1.0.16, the use of Plug.Session in Pow.Plug.Session is susceptible to session fixation attacks if a persistent…
CVE-2023-42446 — CVSS 6.5 (medium): Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version…