Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-26	CVE-2021-31924	Improper Authentication vulnerability in multiple products Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass. low complexity yubico fedoraproject CWE-287	6.8
2019-06-04	CVE-2019-12210	Unspecified vulnerability in Yubico Pam-U2F 1.0.7 In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned. network low complexity yubico	5.5