{"id":"CVE-2026-55370","summary":"Logto: TOTP code can be replayed within the RFC 6238 validity window (one-time use violation)","details":"Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's existing TOTP verification accepted a successfully used TOTP code again while the code remained inside the RFC 6238 acceptance window because the verifier used otplib's stateless check with window = 1 and did not persist or compare the accepted TOTP time-step counter. An attacker who has the victim's first factor and captures a live TOTP value can replay that value to satisfy MFA during the same acceptance window. This issue is fixed in version 1.41.0.","aliases":["GHSA-6wj7-c66m-6c82"],"modified":"2026-07-15T01:49:22.077245306Z","published":"2026-07-10T19:56:53.317Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-294"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55370.json"},"references":[{"type":"WEB","url":"https://github.com/logto-io/logto/releases/tag/v1.41.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55370.json"},{"type":"ADVISORY","url":"https://github.com/logto-io/logto/security/advisories/GHSA-6wj7-c66m-6c82"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55370"},{"type":"FIX","url":"https://github.com/logto-io/logto/commit/9118867f6cbadc7291cf913beb4fede91ed5d374"},{"type":"FIX","url":"https://github.com/logto-io/logto/pull/9109"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/logto-io/logto","events":[{"introduced":"0"},{"fixed":"9118867f6cbadc7291cf913beb4fede91ed5d374"},{"fixed":"91e55698a42f99438cd41ec2b16a1fc51dbdab8a"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.41.0"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["@logto/connector-smtp2go-email@1.0.0","v1.40.1","@logto/tunnel@0.3.8","@logto/translate@0.2.14","@logto/phrases-experience@1.13.3","@logto/core@1.40.1","@logto/core-kit@2.10.0","v1.40.0","@logto/translate@0.2.13","@logto/phrases-experience@1.13.2","@logto/experience@1.19.2","@logto/core@1.40.0","@logto/console@1.37.0","@logto/connector-yunpian-sms@1.2.3","@logto/connector-xiaomi@1.2.4","@logto/connector-x@0.4.3","@logto/connector-whatsapp-sms@1.0.2","@logto/connector-wecom@0.6.0","@logto/connector-wechat-web@1.6.4","@logto/connector-wechat-native@1.4.5","@logto/connector-vonage-sms@0.2.3","@logto/connector-twilio-sms@1.4.3","@logto/connector-tencent-sms@1.4.3","@logto/connector-smtp@1.5.3","@logto/connector-smsbao-sms@1.1.0","@logto/connector-smsaero@1.5.3","@logto/connector-slack@0.3.4","@logto/connector-sendgrid-email@1.5.3","@logto/connector-saml@1.3.5","@logto/connector-qq@1.1.4","@logto/connector-postmark@1.2.3","@logto/connector-patreon@1.2.6","@logto/connector-oidc@1.7.3","@logto/connector-oauth@1.7.6","@logto/connector-naver@1.4.5","@logto/connector-mock-standard-email@3.0.1","@logto/connector-mock-social@1.5.4","@logto/connector-mock-sms@3.0.1","@logto/connector-mock-email@3.0.1","@logto/connector-mailjunky@1.6.0","@logto/connector-mailgun@1.5.5","@logto/connector-logto-social-demo@1.3.5","@logto/connector-logto-email@1.3.5","@logto/connector-linkedin@0.3.4","@logto/connector-line@0.3.4","@logto/connector-kook@0.4.6","@logto/connector-kit@5.0.1","@logto/connector-kakao@1.4.5","@logto/connector-huggingface@0.4.6","@logto/connector-http-email@0.4.2","@logto/connector-google@1.8.4","@logto/connector-gitlab@1.2.6","@logto/connector-github@1.7.4","@logto/connector-gatewayapi-sms@1.2.3","@logto/connector-feishu-web@1.4.5","@logto/connector-facebook@1.6.4","@logto/connector-discord@1.6.4","@logto/connector-dingtalk-web@0.4.4","@logto/connector-azuread@1.6.4","@logto/connector-aws-ses@1.5.3","@logto/connector-apple@1.6.6","@logto/connector-amazon@0.3.4","@logto/connector-aliyun-sms@1.5.3","@logto/connector-aliyun-sms-mas@1.1.0","@logto/connector-aliyun-dm@1.6.0","@logto/connector-alipay-web@1.6.4","@logto/connector-alipay-native@1.4.5","@logto/account@0.4.1","@logto/connector-smsbao-sms@1.0.0","pr-8884-screenshots-1779947396","@logto/connector-mailjunky@1.5.2","@logto/connector-aliyun-sms-mas@1.0.0","v1.39.0","@logto/tunnel@0.3.7","@logto/translate@0.2.12","@logto/shared@3.4.0","@logto/phrases@1.28.0","@logto/phrases-experience@1.13.1","@logto/integration-tests@1.21.0","@logto/experience@1.19.1","@logto/core@1.39.0","@logto/core-kit@2.9.0","@logto/console@1.36.0","@logto/connector-whatsapp-sms@1.0.1","@logto/connector-patreon@1.2.5","@logto/connector-oidc@1.7.2","@logto/connector-oauth@1.7.5","@logto/connector-kook@0.4.5","@logto/connector-huggingface@0.4.5","@logto/connector-gitlab@1.2.5","@logto/connector-apple@1.6.5","@logto/account@0.4.0","@logto/connector-whatsapp-sms@1.0.0","v1.38.0","@logto/tunnel@0.3.6","@logto/translate@0.2.11","@logto/phrases@1.27.0","@logto/phrases-experience@1.13.0","@logto/language-kit@1.3.0","@logto/integration-tests@1.20.0","@logto/experience@1.19.0","@logto/core@1.38.0","@logto/core-kit@2.8.0","@logto/console@1.35.0","@logto/connector-yunpian-sms@1.2.2","@logto/connector-xiaomi@1.2.3","@logto/connector-x@0.4.2","@logto/connector-wecom@0.5.3","@logto/connector-wechat-web@1.6.3","@logto/connector-wechat-native@1.4.4","@logto/connector-vonage-sms@0.2.2","@logto/connector-twilio-sms@1.4.2","@logto/connector-tencent-sms@1.4.2","@logto/connector-smtp@1.5.2","@logto/connector-smsaero@1.5.2","@logto/connector-slack@0.3.3","@logto/connector-sendgrid-email@1.5.2","@logto/connector-saml@1.3.4","@logto/connector-qq@1.1.3","@logto/connector-postmark@1.2.2","@logto/connector-patreon@1.2.4","@logto/connector-oidc@1.7.1","@logto/connector-oauth@1.7.4","@logto/connector-naver@1.4.4","@logto/connector-mock-standard-email@3.0.0","@logto/connector-mock-social@1.5.3","@logto/connector-mock-sms@3.0.0","@logto/connector-mock-email@3.0.0","@logto/connector-mailgun@1.5.4","@logto/connector-logto-social-demo@1.3.4","@logto/connector-logto-email@1.3.4","@logto/connector-linkedin@0.3.3","@logto/connector-line@0.3.3","@logto/connector-kook@0.4.4","@logto/connector-kit@5.0.0","@logto/connector-kakao@1.4.4","@logto/connector-huggingface@0.4.4","@logto/connector-http-sms@0.2.1","@logto/connector-http-email@0.4.1","@logto/connector-google@1.8.3","@logto/connector-gitlab@1.2.4","@logto/connector-github@1.7.3","@logto/connector-gatewayapi-sms@1.2.2","@logto/connector-feishu-web@1.4.4","@logto/connector-facebook@1.6.3","@logto/connector-discord@1.6.3","@logto/connector-dingtalk-web@0.4.3","@logto/connector-azuread@1.6.3","@logto/connector-aws-ses@1.5.2","@logto/connector-apple@1.6.4","@logto/connector-amazon@0.3.3","@logto/connector-aliyun-sms@1.5.2","@logto/connector-aliyun-dm@1.5.2","@logto/connector-alipay-web@1.6.3","@logto/connector-alipay-native@1.4.4","@logto/account@0.3.0","@logto/device-demo-app@0.1.0","v1.37.1","@logto/tunnel@0.3.5","@logto/translate@0.2.10","@logto/phrases-experience@1.12.2","@logto/core@1.37.1","@logto/core-kit@2.7.1","v1.37.0","@logto/translate@0.2.9","@logto/phrases@1.26.0","@logto/integration-tests@1.19.0","@logto/experience@1.18.2","@logto/core@1.37.0","@logto/console@1.34.0","@logto/account@0.2.0","v1.36.0","@logto/tunnel@0.3.4","@logto/translate@0.2.8","@logto/shared@3.3.1","@logto/phrases@1.25.0","@logto/phrases-experience@1.12.1","@logto/integration-tests@1.18.0","@logto/experience@1.18.1","@logto/core@1.36.0","@logto/core-kit@2.7.0","@logto/console@1.33.0","@logto/connector-patreon@1.2.3","@logto/connector-oidc@1.7.0","@logto/connector-oauth@1.7.3","@logto/connector-kook@0.4.3","@logto/connector-huggingface@0.4.3","@logto/connector-gitlab@1.2.3","@logto/connector-apple@1.6.3","v1.35.0","@logto/translate@0.2.7","@logto/phrases@1.24.0","@logto/integration-tests@1.17.0","@logto/experience@1.18.0","@logto/core@1.35.0","@logto/console@1.32.0","@logto/connector-yunpian-sms@1.2.1","@logto/connector-xiaomi@1.2.2","@logto/connector-x@0.4.1","@logto/connector-wecom@0.5.2","@logto/connector-wechat-web@1.6.2","@logto/connector-wechat-native@1.4.3","@logto/connector-vonage-sms@0.2.1","@logto/connector-twilio-sms@1.4.1","@logto/connector-tencent-sms@1.4.1","@logto/connector-smtp@1.5.1","@logto/connector-smsaero@1.5.1","@logto/connector-slack@0.3.2","@logto/connector-sendgrid-email@1.5.1","@logto/connector-saml@1.3.3","@logto/connector-qq@1.1.2","@logto/connector-postmark@1.2.1","@logto/connector-patreon@1.2.2","@logto/connector-oidc@1.6.2","@logto/connector-oauth@1.7.2","@logto/connector-naver@1.4.3","@logto/connector-mock-standard-email@2.2.3","@logto/connector-mock-social@1.5.2","@logto/connector-mock-sms@2.3.2","@logto/connector-mock-email@2.3.2","@logto/connector-mailgun@1.5.3","@logto/connector-logto-social-demo@1.3.3","@logto/connector-logto-email@1.3.3","@logto/connector-linkedin@0.3.2","@logto/connector-line@0.3.2","@logto/connector-kook@0.4.2","@logto/connector-kit@4.7.0","@logto/connector-kakao@1.4.3","@logto/connector-huggingface@0.4.2","@logto/connector-http-sms@0.2.0","@logto/connector-http-email@0.4.0","@logto/connector-google@1.8.2","@logto/connector-gitlab@1.2.2","@logto/connector-github@1.7.2","@logto/connector-gatewayapi-sms@1.2.1","@logto/connector-feishu-web@1.4.3","@logto/connector-facebook@1.6.2","@logto/connector-discord@1.6.2","@logto/connector-dingtalk-web@0.4.2","@logto/connector-azuread@1.6.2","@logto/connector-aws-ses@1.5.1","@logto/connector-apple@1.6.2","@logto/connector-amazon@0.3.2","@logto/connector-aliyun-sms@1.5.1","@logto/connector-aliyun-dm@1.5.1","@logto/connector-alipay-web@1.6.2","@logto/connector-alipay-native@1.4.3","@logto/account@0.1.0","v1.34.0","@logto/translate@0.2.6","@logto/phrases@1.23.0","@logto/integration-tests@1.16.0","@logto/experience@1.17.0","@logto/core@1.34.0","@logto/console@1.31.0","@logto/phrases-account-center@0.1.0","@logto/account-center@0.1.0","v1.33.0","@logto/translate@0.2.5","@logto/phrases@1.22.0","@logto/experience@1.16.1","@logto/core@1.33.0","@logto/console@1.30.0","v1.32.0","@logto/translate@0.2.4","@logto/phrases@1.21.0","@logto/phrases-experience@1.12.0","@logto/integration-tests@1.15.0","@logto/experience@1.16.0","@logto/core@1.32.0","@logto/console@1.29.0","@logto/connector-yunpian-sms@1.2.0","@logto/connector-xiaomi@1.2.1","@logto/connector-x@0.4.0","@logto/connector-wecom@0.5.1","@logto/connector-wechat-web@1.6.1","@logto/connector-wechat-native@1.4.2","@logto/connector-vonage-sms@0.2.0","@logto/connector-twilio-sms@1.4.0","@logto/connector-tencent-sms@1.4.0","@logto/connector-smtp@1.5.0","@logto/connector-smsaero@1.5.0","@logto/connector-slack@0.3.1","@logto/connector-sendgrid-email@1.5.0","@logto/connector-saml@1.3.2","@logto/connector-qq@1.1.1","@logto/connector-postmark@1.2.0","@logto/connector-patreon@1.2.1","@logto/connector-oidc@1.6.1","@logto/connector-oauth@1.7.1","@logto/connector-naver@1.4.2","@logto/connector-mock-standard-email@2.2.2","@logto/connector-mock-social@1.5.1","@logto/connector-mock-sms@2.3.1","@logto/connector-mock-email@2.3.1","@logto/connector-mailgun@1.5.2","@logto/connector-logto-social-demo@1.3.2","@logto/connector-logto-sms@1.3.2","@logto/connector-logto-email@1.3.2","@logto/connector-linkedin@0.3.1","@logto/connector-line@0.3.1","@logto/connector-kook@0.4.1","@logto/connector-kit@4.6.0","@logto/connector-kakao@1.4.2","@logto/connector-huggingface@0.4.1","@logto/connector-http-email@0.3.2","@logto/connector-google@1.8.1","@logto/connector-gitlab@1.2.1","@logto/connector-github@1.7.1","@logto/connector-gatewayapi-sms@1.2.0","@logto/connector-feishu-web@1.4.2","@logto/connector-facebook@1.6.1","@logto/connector-discord@1.6.1","@logto/connector-dingtalk-web@0.4.1","@logto/connector-azuread@1.6.1","@logto/connector-aws-ses@1.5.0","@logto/connector-apple@1.6.1","@logto/connector-amazon@0.3.1","@logto/connector-aliyun-sms@1.5.0","@logto/connector-aliyun-dm@1.5.0","@logto/connector-alipay-web@1.6.1","@logto/connector-alipay-native@1.4.2","v1.31.0","@logto/translate@0.2.3","@logto/phrases@1.20.0","@logto/phrases-experience@1.11.0","@logto/integration-tests@1.14.0","@logto/experience@1.15.0","@logto/core@1.31.0","@logto/console@1.28.0","@logto/connector-http-sms@0.1.0","@logto/connector-mock-sms@2.3.0","@logto/connector-mock-email@2.3.0","@logto/connector-kit@4.5.0","@logto/connector-http-sms@0.0.0","v1.30.1","@logto/tunnel@0.3.3","@logto/translate@0.2.2","@logto/phrases-experience@1.10.1","@logto/core@1.30.1","@logto/core-kit@2.6.1","@logto/console@1.27.0","@logto/connector-yunpian-sms@1.1.1","@logto/connector-xiaomi@1.2.0","@logto/connector-x@0.3.0","@logto/connector-wecom@0.5.0","@logto/connector-wechat-web@1.6.0","@logto/connector-wechat-native@1.4.1","@logto/connector-vonage-sms@0.1.1","@logto/connector-twilio-sms@1.3.1","@logto/connector-tencent-sms@1.3.1","@logto/connector-smtp@1.4.1","@logto/connector-smsaero@1.4.1","@logto/connector-slack@0.3.0","@logto/connector-sendgrid-email@1.4.1","@logto/connector-saml@1.3.1","@logto/connector-qq@1.1.0","@logto/connector-postmark@1.1.1","@logto/connector-patreon@1.2.0","@logto/connector-oidc@1.6.0","@logto/connector-oauth@1.7.0","@logto/connector-naver@1.4.1","@logto/connector-mock-standard-email@2.2.1","@logto/connector-mock-social@1.5.0","@logto/connector-mock-sms@2.2.1","@logto/connector-mock-email@2.2.1","@logto/connector-mailgun@1.5.1","@logto/connector-logto-social-demo@1.3.1","@logto/connector-logto-sms@1.3.1","@logto/connector-logto-email@1.3.1","@logto/connector-linkedin@0.3.0","@logto/connector-line@0.3.0","@logto/connector-kook@0.4.0","@logto/connector-kit@4.4.0","@logto/connector-kakao@1.4.1","@logto/connector-huggingface@0.4.0","@logto/connector-http-email@0.3.1","@logto/connector-google@1.8.0","@logto/connector-gitlab@1.2.0","@logto/connector-github@1.7.0","@logto/connector-gatewayapi-sms@1.1.1","@logto/connector-feishu-web@1.4.1","@logto/connector-facebook@1.6.0","@logto/connector-discord@1.6.0","@logto/connector-dingtalk-web@0.4.0","@logto/connector-azuread@1.6.0","@logto/connector-aws-ses@1.4.1","@logto/connector-apple@1.6.0","@logto/connector-amazon@0.3.0","@logto/connector-aliyun-sms@1.4.1","@logto/connector-aliyun-dm@1.4.1","@logto/connector-alipay-web@1.6.0","@logto/connector-alipay-native@1.4.1","@logto/api@1.30.0","@logto/api@0.0.0","v1.29.0","@logto/tunnel@0.3.2","@logto/integration-tests@1.13.1","@logto/core@1.29.0","@logto/console@1.26.0","v1.28.0","@logto/tunnel@0.3.1","@logto/translate@0.2.1","@logto/shared@3.3.0","@logto/integration-tests@1.13.0","@logto/experience@1.14.0","@logto/core@1.28.0","@logto/console@1.25.0","@logto/connector-qq@1.0.0","@logto/connector-qq@0.1.0","v1.27.0","@logto/tunnel@0.3.0","@logto/translate@0.2.0","@logto/shared@3.2.0","@logto/phrases@1.19.0","@logto/phrases-experience@1.10.0","@logto/language-kit@1.2.0","@logto/integration-tests@1.12.0","@logto/experience@1.13.0","@logto/elements@0.1.0","@logto/demo-app@1.5.0","@logto/core@1.27.0","@logto/core-kit@2.6.0","@logto/console@1.24.0","@logto/connector-yunpian-sms@1.1.0","@logto/connector-xiaomi@1.1.0","@logto/connector-x@0.2.0","@logto/connector-wecom@0.4.0","@logto/connector-wechat-web@1.5.0","@logto/connector-wechat-native@1.4.0","@logto/connector-vonage-sms@0.1.0","@logto/connector-twilio-sms@1.3.0","@logto/connector-tencent-sms@1.3.0","@logto/connector-smtp@1.4.0","@logto/connector-smsaero@1.4.0","@logto/connector-slack@0.2.0","@logto/connector-sendgrid-email@1.4.0","@logto/connector-saml@1.3.0","@logto/connector-postmark@1.1.0","@logto/connector-patreon@1.1.0","@logto/connector-oidc@1.5.0","@logto/connector-oauth@1.6.0","@logto/connector-naver@1.4.0","@logto/connector-mock-standard-email@2.2.0","@logto/connector-mock-social@1.4.0","@logto/connector-mock-sms@2.2.0","@logto/connector-mock-email@2.2.0","@logto/connector-mailgun@1.5.0","@logto/connector-logto-social-demo@1.3.0","@logto/connector-logto-sms@1.3.0","@logto/connector-logto-email@1.3.0","@logto/connector-linkedin@0.2.0","@logto/connector-line@0.2.0","@logto/connector-kook@0.3.0","@logto/connector-kit@4.3.0","@logto/connector-kakao@1.4.0","@logto/connector-huggingface@0.3.0","@logto/connector-http-email@0.3.0","@logto/connector-google@1.7.0","@logto/connector-gitlab@1.1.0","@logto/connector-github@1.6.0","@logto/connector-gatewayapi-sms@1.1.0","@logto/connector-feishu-web@1.4.0","@logto/connector-facebook@1.5.0","@logto/connector-discord@1.5.0","@logto/connector-dingtalk-web@0.3.0","@logto/connector-azuread@1.5.0","@logto/connector-aws-ses@1.4.0","@logto/connector-apple@1.5.0","@logto/connector-amazon@0.2.0","@logto/connector-aliyun-sms@1.4.0","@logto/connector-aliyun-dm@1.4.0","@logto/connector-alipay-web@1.5.0","@logto/connector-alipay-native@1.4.0","@logto/app-insights@2.1.0","v1.26.0","@logto/translate@0.1.3","@logto/language-kit@1.1.3","@logto/experience@1.12.0","@logto/core@1.26.0","@logto/console@1.23.0","@logto/connector-azuread@1.4.2","@logto/translate@0.1.2","@logto/language-kit@1.1.2","v1.25.0","@logto/core@1.25.0","@logto/console@1.22.1","@logto/connector-x@0.1.1","@logto/connector-smtp@1.3.0","@logto/connector-sendgrid-email@1.3.0","@logto/connector-mailgun@1.4.0","@logto/connector-line@0.1.1","@logto/connector-kit@4.2.0","@logto/connector-aws-ses@1.3.0","@logto/connector-amazon@0.1.1","@logto/connector-aliyun-sms@1.3.0","@logto/connector-aliyun-dm@1.3.0","@logto/tunnel@0.2.6","v1.24.1","@logto/tunnel@0.2.5","@logto/translate@0.1.1","@logto/shared@3.1.4","@logto/phrases@1.18.0","@logto/phrases-experience@1.9.1","@logto/language-kit@1.1.1","@logto/integration-tests@1.11.1","@logto/experience@1.11.2","@logto/experience-legacy@1.11.1","@logto/elements@0.0.2","@logto/demo-app@1.4.2","@logto/core@1.24.1","@logto/core-kit@2.5.4","@logto/console@1.22.0","@logto/connector-yunpian-sms@1.0.1","@logto/connector-xiaomi@1.0.1","@logto/connector-x@0.1.0","@logto/connector-wecom@0.3.2","@logto/connector-wechat-web@1.4.1","@logto/connector-wechat-native@1.3.1","@logto/connector-vonage-sms@0.0.1","@logto/connector-twilio-sms@1.2.1","@logto/connector-tencent-sms@1.2.1","@logto/connector-smtp@1.2.1","@logto/connector-smsaero@1.3.1","@logto/connector-slack@0.1.0","@logto/connector-sendgrid-email@1.2.1","@logto/connector-saml@1.2.1","@logto/connector-postmark@1.0.1","@logto/connector-patreon@1.0.1","@logto/connector-oidc@1.4.1","@logto/connector-oauth@1.5.1","@logto/connector-naver@1.3.1","@logto/connector-mock-standard-email@2.1.1","@logto/connector-mock-social@1.3.1","@logto/connector-mock-sms@2.1.1","@logto/connector-mock-email@2.1.1","@logto/connector-mailgun@1.3.1","@logto/connector-logto-social-demo@1.2.1","@logto/connector-logto-sms@1.2.1","@logto/connector-logto-email@1.2.1","@logto/connector-linkedin@0.1.0","@logto/connector-line@0.1.0","@logto/connector-kook@0.2.1","@logto/connector-kit@4.1.1","@logto/connector-kakao@1.3.1","@logto/connector-huggingface@0.2.1","@logto/connector-http-email@0.2.1","@logto/connector-google@1.6.1","@logto/connector-gitlab@1.0.1","@logto/connector-github@1.5.1","@logto/connector-gatewayapi-sms@1.0.1","@logto/connector-feishu-web@1.3.1","@logto/connector-facebook@1.4.1","@logto/connector-discord@1.4.1","@logto/connector-dingtalk-web@0.2.1","@logto/connector-azuread@1.4.1","@logto/connector-aws-ses@1.2.1","@logto/connector-apple@1.4.1","@logto/connector-amazon@0.1.0","@logto/connector-aliyun-sms@1.2.1","@logto/connector-aliyun-dm@1.2.1","@logto/connector-alipay-web@1.4.1","@logto/connector-alipay-native@1.3.1","@logto/app-insights@2.0.1","@logto/connector-amazon@0.0.0","@logto/connector-linkedin@0.0.0","@logto/connector-slack@0.0.0","@logto/connector-x@0.0.0","v1.24.0","@logto/phrases@1.17.0","@logto/core@1.24.0","@logto/console@1.21.0","@logto/tunnel@0.2.4","@logto/shared@3.1.3","@logto/core-kit@2.5.3","@logto/connector-http-email@0.2.0","v1.23.1","@logto/experience@1.11.1","@logto/core@1.23.1","v1.23.0","@logto/tunnel@0.2.3","@logto/phrases@1.16.0","@logto/integration-tests@1.11.0","@logto/experience@1.11.0","@logto/experience-legacy@1.11.0","@logto/core@1.23.0","@logto/core-kit@2.5.2","@logto/console@1.20.0","@logto/connector-yunpian-sms@1.0.0","@logto/connector-xiaomi@1.0.0","v1.22.0","@logto/phrases@1.15.0","@logto/phrases-experience@1.9.0","@logto/integration-tests@1.10.0","@logto/experience@1.10.0","@logto/experience-legacy@1.10.0","@logto/core@1.22.0","@logto/console@1.19.0","@logto/connector-kit@4.1.0","@logto/connector-vonage-sms@0.0.0","v1.21.0","@logto/tunnel@0.2.2","@logto/shared@3.1.2","@logto/phrases@1.14.1","@logto/core@1.21.0","@logto/console@1.18.1","@logto/connector-google@1.6.0","@logto/connector-gatewayapi-sms@1.0.0","@logto/connector-gatewayapi-sms@0.0.0","@logto/tunnel@0.2.1","@logto/core-kit@2.5.1","@logto/connector-http-email@0.1.0","v1.20.0","@logto/translate@0.1.0","@logto/phrases@1.14.0","@logto/phrases-experience@1.8.0","@logto/integration-tests@1.9.0","@logto/experience@1.9.0","@logto/experience-legacy@1.9.0","@logto/elements@0.0.1","@logto/demo-app@1.4.1","@logto/core@1.20.0","@logto/console@1.18.0","@logto/connector-wecom@0.3.1","@logto/connector-patreon@1.0.0","@logto/connector-oauth@1.5.0","@logto/connector-kook@0.2.0","@logto/connector-gitlab@1.0.0","@logto/experience-legacy@1.8.0","@logto/tunnel@0.2.0","@logto/connector-gitlab@0.0.1","@logto/connector-patreon@0.0.1","@logto/tunnel@0.1.0","@logto/tunnel@0.0.0","@logto/translate@0.0.0","@logto/connector-kook@0.1.0","v1.19.0","@logto/phrases@1.13.0","@logto/integration-tests@1.8.0","@logto/experience@1.8.0","@logto/demo-app@1.4.0","@logto/core@1.19.0","@logto/console@1.17.0","@logto/connector-wecom@0.3.0","@logto/connector-wechat-web@1.4.0","@logto/connector-wechat-native@1.3.0","@logto/connector-twilio-sms@1.2.0","@logto/connector-tencent-sms@1.2.0","@logto/connector-smtp@1.2.0","@logto/connector-smsaero@1.3.0","@logto/connector-sendgrid-email@1.2.0","@logto/connector-saml@1.2.0","@logto/connector-oidc@1.4.0","@logto/connector-oauth@1.4.0","@logto/connector-naver@1.3.0","@logto/connector-mock-standard-email@2.1.0","@logto/connector-mock-social@1.3.0","@logto/connector-mock-sms@2.1.0","@logto/connector-mock-email@2.1.0","@logto/connector-mailgun@1.3.0","@logto/connector-logto-social-demo@1.2.0","@logto/connector-logto-sms@1.2.0","@logto/connector-logto-email@1.2.0","@logto/connector-kakao@1.3.0","@logto/connector-huggingface@0.2.0","@logto/connector-google@1.5.0","@logto/connector-github@1.5.0","@logto/connector-feishu-web@1.3.0","@logto/connector-facebook@1.4.0","@logto/connector-discord@1.4.0","@logto/connector-dingtalk-web@0.2.0","@logto/connector-azuread@1.4.0","@logto/connector-aws-ses@1.2.0","@logto/connector-apple@1.4.0","@logto/connector-aliyun-sms@1.2.0","@logto/connector-aliyun-dm@1.2.0","@logto/connector-alipay-web@1.4.0","@logto/connector-alipay-native@1.3.0","@logto/connector-postmark@0.0.0","@logto/connector-postmark@1.0.0","@logto/elements@0.0.0","v1.18.0","@logto/phrases@1.12.0","@logto/phrases-experience@1.7.0","@logto/integration-tests@1.7.0","@logto/experience@1.7.0","@logto/demo-app@1.3.0","@logto/core@1.18.0","@logto/console@1.16.0","@logto/connector-wecom@0.2.1","@logto/connector-wechat-web@1.3.1","@logto/connector-wechat-native@1.2.1","@logto/connector-twilio-sms@1.1.2","@logto/connector-tencent-sms@1.1.2","@logto/connector-smtp@1.1.3","@logto/connector-smsaero@1.2.2","@logto/connector-sendgrid-email@1.1.2","@logto/connector-saml@1.1.2","@logto/connector-oidc@1.3.1","@logto/connector-oauth@1.3.1","@logto/connector-naver@1.2.1","@logto/connector-mock-standard-email@2.0.2","@logto/connector-mock-social@1.2.1","@logto/connector-mock-sms@2.0.2","@logto/connector-mock-email@2.0.2","@logto/connector-mailgun@1.2.2","@logto/connector-logto-social-demo@1.1.2","@logto/connector-logto-sms@1.1.2","@logto/connector-logto-email@1.1.2","@logto/connector-kit@4.0.0","@logto/connector-kakao@1.2.1","@logto/connector-huggingface@0.1.1","@logto/connector-google@1.4.0","@logto/connector-github@1.4.2","@logto/connector-feishu-web@1.2.1","@logto/connector-facebook@1.3.1","@logto/connector-discord@1.3.1","@logto/connector-dingtalk-web@0.1.1","@logto/connector-azuread@1.3.0","@logto/connector-aws-ses@1.1.2","@logto/connector-apple@1.3.1","@logto/connector-aliyun-sms@1.1.2","@logto/connector-aliyun-dm@1.1.2","@logto/connector-alipay-web@1.3.1","@logto/connector-alipay-native@1.2.1","v1.17.0","@logto/phrases@1.11.0","@logto/experience@1.6.2","@logto/core@1.17.0","@logto/core-kit@2.5.0","@logto/console@1.15.0","@logto/connector-github@1.4.1","@logto/connector-dingtalk-web@0.1.0","@logto/connector-dingtalk-web@0.0.0","@logto/connector-dingtalk-web@1.0.0","v1.16.0","@logto/shared@3.1.1","@logto/phrases@1.10.1","@logto/integration-tests@1.6.1","@logto/experience@1.6.1","@logto/core@1.16.0","@logto/console@1.14.0","@logto/connector-oidc@1.3.0","@logto/connector-oauth@1.3.0","@logto/connector-huggingface@0.1.0","@logto/connector-github@1.4.0","@logto/app-insights@2.0.0","@logto/connector-huggingface@0.0.0","v1.15.0","@logto/phrases@1.10.0","@logto/phrases-experience@1.6.1","@logto/integration-tests@1.6.0","@logto/experience@1.6.0","@logto/demo-app@1.2.0","@logto/core@1.15.0","@logto/core-kit@2.4.0","@logto/console@1.13.0","@logto/connector-wecom@0.2.0","@logto/connector-wechat-web@1.3.0","@logto/connector-wechat-native@1.2.0","@logto/connector-twilio-sms@1.1.1","@logto/connector-tencent-sms@1.1.1","@logto/connector-smtp@1.1.2","@logto/connector-smsaero@1.2.1","@logto/connector-sendgrid-email@1.1.1","@logto/connector-saml@1.1.1","@logto/connector-oidc@1.2.0","@logto/connector-oauth@1.2.0","@logto/connector-naver@1.2.0","@logto/connector-mock-standard-email@2.0.1","@logto/connector-mock-social@1.2.0","@logto/connector-mock-sms@2.0.1","@logto/connector-mock-email@2.0.1","@logto/connector-mailgun@1.2.1","@logto/connector-logto-social-demo@1.1.1","@logto/connector-logto-sms@1.1.1","@logto/connector-logto-email@1.1.1","@logto/connector-kit@3.0.0","@logto/connector-kakao@1.2.0","@logto/connector-google@1.3.0","@logto/connector-github@1.3.0","@logto/connector-feishu-web@1.2.0","@logto/connector-facebook@1.3.0","@logto/connector-discord@1.3.0","@logto/connector-azuread@1.2.0","@logto/connector-aws-ses@1.1.1","@logto/connector-apple@1.3.0","@logto/connector-aliyun-sms@1.1.1","@logto/connector-aliyun-dm@1.1.1","@logto/connector-alipay-web@1.3.0","@logto/connector-alipay-native@1.2.0","v1.14.0","@logto/core@1.14.0","@logto/connector-smtp@1.1.1","@logto/connector-apple@1.2.0","@logto/connector-wecom@0.1.0","v1.13.1","@logto/core@1.13.1","@logto/console@1.12.1","v1.13.0","@logto/shared@3.1.0","@logto/phrases@1.9.0","@logto/phrases-experience@1.6.0","@logto/language-kit@1.1.0","@logto/integration-tests@1.5.0","@logto/experience@1.5.0","@logto/demo-app@1.1.0","@logto/core@1.13.0","@logto/core-kit@2.3.0","@logto/console@1.12.0","@logto/connector-wechat-web@1.2.0","@logto/connector-wechat-native@1.1.0","@logto/connector-twilio-sms@1.1.0","@logto/connector-tencent-sms@1.1.0","@logto/connector-smtp@1.1.0","@logto/connector-smsaero@1.2.0","@logto/connector-sendgrid-email@1.1.0","@logto/connector-saml@1.1.0","@logto/connector-oidc@1.1.0","@logto/connector-oauth@1.1.0","@logto/connector-naver@1.1.0","@logto/connector-mock-standard-email@2.0.0","@logto/connector-mock-social@1.1.0","@logto/connector-mock-sms@2.0.0","@logto/connector-mock-email@2.0.0","@logto/connector-mailgun@1.2.0","@logto/connector-logto-social-demo@1.1.0","@logto/connector-logto-sms@1.1.0","@logto/connector-logto-email@1.1.0","@logto/connector-kit@2.1.0","@logto/connector-kakao@1.1.0","@logto/connector-google@1.2.0","@logto/connector-github@1.2.0","@logto/connector-feishu-web@1.1.0","@logto/connector-facebook@1.2.0","@logto/connector-discord@1.2.0","@logto/connector-azuread@1.1.0","@logto/connector-aws-ses@1.1.0","@logto/connector-apple@1.1.0","@logto/connector-aliyun-sms@1.1.0","@logto/connector-aliyun-dm@1.1.0","@logto/connector-alipay-web@1.2.0","@logto/connector-alipay-native@1.1.0","@logto/app-insights@1.4.0","v1.12.0","@logto/phrases@1.8.0","@logto/phrases-experience@1.5.0","@logto/integration-tests@1.4.3","@logto/experience@1.4.0","@logto/core@1.12.0","@logto/core-kit@2.2.1","@logto/console@1.11.0","v1.11.0","@logto/phrases@1.7.0","@logto/phrases-experience@1.4.0","@logto/experience@1.3.0","@logto/core@1.11.0","@logto/console@1.10.0","v1.10.1","@logto/phrases@1.6.0","@logto/integration-tests@1.4.2","@logto/core@1.10.1","@logto/console@1.9.0","@logto/connector-wechat-web@1.1.1","@logto/connector-wechat-native@1.0.1","@logto/connector-twilio-sms@1.0.1","@logto/connector-tencent-sms@1.0.1","@logto/connector-smtp@1.0.1","@logto/connector-smsaero@1.1.1","@logto/connector-sendgrid-email@1.0.2","@logto/connector-saml@1.0.2","@logto/connector-oidc@1.0.3","@logto/connector-oauth@1.0.1","@logto/connector-naver@1.0.1","@logto/connector-mock-standard-email@1.0.1","@logto/connector-mock-social@1.0.1","@logto/connector-mock-sms@1.0.1","@logto/connector-mock-email@1.0.1","@logto/connector-mailgun@1.1.1","@logto/connector-logto-social-demo@1.0.1","@logto/connector-logto-sms@1.0.1","@logto/connector-logto-email@1.0.1","@logto/connector-kit@2.0.0","@logto/connector-kakao@1.0.1","@logto/connector-google@1.1.1","@logto/connector-github@1.1.1","@logto/connector-feishu-web@1.0.1","@logto/connector-facebook@1.1.1","@logto/connector-discord@1.1.1","@logto/connector-azuread@1.0.1","@logto/connector-aws-ses@1.0.2","@logto/connector-apple@1.0.3","@logto/connector-aliyun-sms@1.0.2","@logto/connector-aliyun-dm@1.0.2","@logto/connector-alipay-web@1.1.1","@logto/connector-alipay-native@1.0.1","v1.10.0","@logto/core@1.10.0","@logto/core-kit@2.2.0","v1.9.2","@logto/shared@3.0.0","@logto/core@1.9.2","@logto/core-kit@2.1.2","@logto/console@1.8.0","@logto/connector-oidc@1.0.2","@logto/connector-apple@1.0.2","v1.9.1","@logto/phrases-experience@1.3.1","@logto/experience@1.2.1","@logto/core@1.9.1","@logto/core-kit@2.1.1","@logto/console@1.7.1","v1.9.0","@logto/shared@2.0.1","@logto/phrases@1.5.0","@logto/phrases-experience@1.3.0","@logto/integration-tests@1.4.1","@logto/experience@1.2.0","@logto/core@1.9.0","@logto/core-kit@2.1.0","@logto/console@1.7.0","@logto/experience@1.1.5","@logto/phrases-experience@1.2.0","v1.8.0","@logto/core@1.8.0","@logto/console@1.6.0","@logto/connector-sendgrid-email@1.0.1","@logto/connector-mailgun@1.1.0","@logto/connector-mailgun@1.0.0","v1.7.0","@logto/core@1.7.0","@logto/console@1.5.1","@logto/connector-smsaero@1.1.0","@logto/connector-smsaero@1.0.0","v1.6.0","@logto/ui@1.1.5","@logto/phrases@1.4.1","@logto/integration-tests@1.4.0","@logto/core@1.6.0","@logto/core-kit@2.0.1","@logto/console@1.5.0","@logto/app-insights@1.3.1","v1.5.0","@logto/phrases@1.4.0","@logto/integration-tests@1.3.0","@logto/core@1.5.0","@logto/console@1.4.0","@logto/connector-aliyun-sms@1.0.1","@logto/connector-aliyun-dm@1.0.1","@logto/cloud@0.2.6","v1.3.0","@logto/core@1.3.0","@logto/console@1.2.4","@logto/connector-saml@1.0.1","@logto/app-insights@1.3.0","v1.2.3","@logto/ui@1.1.4","@logto/demo-app@1.0.1","@logto/core@1.2.3","@logto/console@1.2.3","@logto/connector-wechat-web@1.1.0","@logto/connector-google@1.1.0","@logto/connector-github@1.1.0","@logto/connector-facebook@1.1.0","@logto/connector-discord@1.1.0","@logto/connector-aws-ses@1.0.1","@logto/connector-alipay-web@1.1.0","v1.2.2","@logto/ui@1.1.3","@logto/core@1.2.2","@logto/console@1.2.2","@logto/app-insights@1.2.0","v1.2.1","@logto/ui@1.1.2","@logto/core@1.2.1","@logto/console@1.2.1","@logto/app-insights@1.1.0","@logto/app-insights@1.0.1","v1.2.0","@logto/ui@1.1.1","@logto/shared@2.0.0","@logto/phrases@1.2.0","@logto/phrases-ui@1.2.0","@logto/core@1.2.0","@logto/core-kit@2.0.0","@logto/console@1.2.0","@logto/connector-oidc@1.0.1","@logto/connector-kit@1.1.1","@logto/connector-apple@1.0.1","@logto/cloud@0.2.5","@logto/ui@1.1.0","@logto/integration-tests@1.1.0","@logto/console@1.1.0","@logto/connector-wechat-web@1.0.0","@logto/connector-wechat-native@1.0.0","@logto/connector-twilio-sms@1.0.0","@logto/connector-tencent-sms@1.0.0","@logto/connector-smtp@1.0.0","@logto/connector-sendgrid-email@1.0.0","@logto/connector-saml@1.0.0","@logto/connector-oidc@1.0.0","@logto/connector-oauth@1.0.0","@logto/connector-naver@1.0.0","@logto/connector-mock-standard-email@1.0.0","@logto/connector-mock-social@1.0.0","@logto/connector-mock-sms@1.0.0","@logto/connector-mock-email@1.0.0","@logto/connector-logto-social-demo@1.0.0","@logto/connector-logto-sms@1.0.0","@logto/connector-logto-email@1.0.0","@logto/connector-kakao@1.0.0","@logto/connector-google@1.0.0","@logto/connector-github@1.0.0","@logto/connector-feishu-web@1.0.0","@logto/connector-facebook@1.0.0","@logto/connector-discord@1.0.0","@logto/connector-azuread@1.0.0","@logto/connector-aws-ses@1.0.0","@logto/connector-apple@1.0.0","@logto/connector-aliyun-sms@1.0.0","@logto/connector-aliyun-dm@1.0.0","@logto/connector-alipay-web@1.0.0","@logto/connector-alipay-native@1.0.0","v1.1.0","@logto/shared@1.0.3","@logto/schemas@1.1.0","@logto/phrases@1.1.0","@logto/phrases-ui@1.1.0","@logto/core@1.1.0","@logto/cloud@0.2.4","@logto/app-insights@1.0.0","v1.0.2","@logto/shared@1.0.1","@logto/schemas@1.0.1","@logto/core@1.0.2","@logto/cloud@0.2.2","v1.0.1","@logto/core@1.0.1","@logto/cloud@0.2.1","v1.0.0","@logto/language-kit@1.0.0","@logto/core-kit@1.0.0","@logto/connector-kit@1.0.0","@logto/connector-kit@1.0.0-rc.3","v1.0.0-rc.2","@logto/core@1.0.0-rc.2","@logto/connector-kit@1.0.0-rc.2","v1.0.0-rc.1","@logto/core@1.0.0-rc.1","@logto/cloud@0.1.0","@logto/connector-kit@1.0.0-rc.1","v1.0.0-rc.0","@logto/shared@1.0.0-rc.0","@logto/schemas@1.0.0-rc.0","@logto/phrases@1.0.0-rc.0","@logto/phrases-ui@1.0.0-rc.0","@logto/language-kit@1.0.0-rc.0","@logto/demo-app@1.0.0-rc.0","@logto/core@1.0.0-rc.0","@logto/core-kit@1.0.0-rc.0","@logto/connector-kit@1.0.0-rc.0","@logto/connector-kit@1.0.0-beta.33","v1.0.0-beta.18","@logto/shared@1.0.0-beta.17","@logto/schemas@1.0.0-beta.17","@logto/phrases@1.0.0-beta.17","@logto/phrases-ui@1.0.0-beta.17","@logto/demo-app@1.0.0-beta.13","@logto/core@1.0.0-beta.18","@logto/connector-kit@1.0.0-beta.32","@logto/language-kit@1.0.0-beta.30","@logto/core-kit@1.0.0-beta.30","@logto/connector-kit@1.0.0-beta.31","@logto/shared@1.0.0-beta.16","@logto/phrases@1.0.0-beta.16","@logto/phrases-ui@1.0.0-beta.13","@logto/language-kit@1.0.0-beta.29","@logto/demo-app@1.0.0-beta.12","@logto/core-kit@1.0.0-beta.29","v1.0.0-beta.13","@logto/schemas@1.0.0-beta.13","@logto/core@1.0.0-beta.13","@logto/cli@1.0.0-beta.13","v1.0.0-beta.12","v1.0.0-beta.11","v1.0.0-beta.10","v1.0.0-beta.9","v1.0.0-beta.8","v1.0.0-beta.6","v1.0.0-beta.5","v1.0.0-beta.4","v1.0.0-beta.3","v1.0.0-beta.2","v1.0.0-beta.1","v1.0.0-beta.0","v1.0.0-alpha.4","v1.0.0-alpha.3","v1.0.0-alpha.2","v1.0.0-alpha.1","v1.0.0-alpha.0","v0.1.2-alpha.5","v0.1.2-alpha.4","v0.1.2-alpha.3","v0.1.2-alpha.2","v0.1.2-alpha.1","v0.1.2-alpha.0","v0.1.1-alpha.0","v0.1.0-internal"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55370.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N"}]}