CVE-2022-25896: Passport Project Passport

Medium severity, CVSS 4.8. EPSS: 1.1% chance of exploitation in the next 30 days.

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.

Affected products

• Passport Project Passport: before 0.6.0 (fixed in 0.6.0)

Published 2022-07-01. Last modified 2026-06-17.