CVE-2021-45890: Authguard Project Authguard

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier.

Affected products

• Authguard Project Authguard: before 0.9.0 (fixed in 0.9.0)

Published 2021-12-27. Last modified 2026-06-17.