Approved changes feed: RSS · Atom

cpe:2.3:a:heroiclabs:nakama:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHeroiclabs (92f74ce3-e452-5cdf-86a3-55527921d595)
ProductNakama (5b7c9f6a-3b24-5ed7-ab1c-1f3a2d9f85d1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/playstackltd/survival-engine-nakama purl2cpe 2026-06-01 10:11:19.926866
pkg:docker/heroiclabs/nakama purl2cpe 2026-06-01 10:11:19.926869
pkg:github/heroiclabs/nakama purl2cpe 2026-06-01 10:11:19.926871
pkg:rpm/opensuse/nakama purl2cpe 2026-06-01 10:11:19.926874

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2321 vulnerable 2026-06-08 05:43:35.302937 Improper Restriction of Excessive Authentication Attempts in heroiclabs/nakama
HIGH (7.5)
Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks.
Published: 2022-07-05T18:25:11.000Z
Updated: 2024-08-03T00:32:09.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2306 vulnerable 2026-06-08 05:43:35.270264 Insufficient Session Expiration in heroiclabs/nakama
HIGH (8.2)
Old session tokens can be used to authenticate to the application and send authenticated requests.
Published: 2022-07-05T08:30:11.000Z
Updated: 2024-08-03T00:32:09.620Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.