CVE-2024-8796

Medium

Advisory

Published 17 Sept 2024In the index since 6 Sept 2026

Devise-Two-Factor Authentication Uses Insufficient Default OTP Shared Secret Length

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
devise-two-factorgem	4.0.2	6.0.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

mastodondefault-gh

1 of the 3 container images this version deploys carry CVE-2024-8796.

Container image	Digest	Package	Fixed in
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	devise-two-factor@4.0.2	6.0.0

5,056

mastodonrivals-space

1 of the 3 container images this version deploys carry CVE-2024-8796.

Container image	Digest	Package	Fixed in
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	devise-two-factor@4.0.2	6.0.0

6,026

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	devise-two-factor@4.0.2	6.0.0	1
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	devise-two-factor@4.0.2	6.0.0	1