Skip to content

Kanidm: Stored HTML injection in "passkey-enrolment" partial via displayname → htmx-driven authenticated request forgery

Moderate severity GitHub Reviewed Published Apr 30, 2026 in kanidm/kanidm • Updated May 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts