Skip to content
Heist/ feed
Back to feed
High

Logto: Account Center MFA management step-up bypass via WebAuthn registration verification

Type: advisorySources: OSV

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's Account Center step-up check accepted any active verification record that belonged to the current user and had isVerified === true. A WebAuthn registration verification record for binding a new passkey could be created and verified with only an existing Account API bearer token, then sent in the logto-verification-id header and treated as identityVerified=true by Account Center routes, allowing MFA factor management without proving possession of an existing password, identifier, or MFA factor. This issue is fixed in version 1.41.0.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-55377
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 06:41 UTC · Revision 1

Source evidence

Logto: Account Center MFA management step-up bypass via WebAuthn registration verification

core-osv · Original source

Published 10 Jul 2026, 19:57 UTC

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's Account Center step-up check accepted any active verification record that belonged to the current user and had isVerified === true. A WebAuthn registration verification record for binding a new passkey could be created and verified with only an existing Account API bearer token, then sent in the logto-verification-id header and treated as identityVerified=true by Account Center routes, allowing MFA factor management without proving possession of an existing password, identifier, or MFA factor. This issue is fixed in version 1.41.0.

osv:CVE-2026-55377
Complete source record
{
  "id": "f5590a444b3a13fb2364b1b6cce6d8fa9de3e3d8673941412636dc6c83ceb73a",
  "url": "https://osv.dev/vulnerability/CVE-2026-55377",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Logto: Account Center MFA management step-up bypass via WebAuthn registration verification",
    "summary": "Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's Account Center step-up check accepted any active verification record that belonged to the current user and had isVerified === true. A WebAuthn registration verification record for binding a new passkey could be created and verified with only an existing Account API bearer token, then sent in the logto-verification-id header and treated as identityVerified=true by Account Center routes, allowing MFA factor management without proving possession of an existing password, identifier, or MFA factor. This issue is fixed in version 1.41.0.",
    "evidence": "osv:CVE-2026-55377",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2026-55377",
      "aliases": [
        "CVE-2026-55377",
        "GHSA-q4h3-38gc-4p4j"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/logto-io/logto",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "91e55698a42f99438cd41ec2b16a1fc51dbdab8a"
                },
                {
                  "fixed": "f56255a7edf3b22b0ec2fdb814814ce6b0123b74"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "1.41.0"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StringRangeExpression"
                  },
                  {
                    "range": [
                      {
                        "fixed": "f56255a7edf3b22b0ec2fdb814814ce6b0123b74"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  },
                  {
                    "range": [
                      {
                        "fixed": "91e55698a42f99438cd41ec2b16a1fc51dbdab8a"
                      }
                    ],
                    "source": "REFERENCES_TAG",
                    "original_tag": "v1.41.0"
                  }
                ]
              }
            }
          ],
          "versions": [
            "@logto/connector-smtp2go-email@1.0.0",
            "v1.40.1",
            "@logto/tunnel@0.3.8",
            "@logto/translate@0.2.14",
            "@logto/phrases-experience@1.13.3",
            "@logto/core@1.40.1",
            "@logto/core-kit@2.10.0",
            "v1.40.0",
            "@logto/translate@0.2.13",
            "@logto/phrases-experience@1.13.2",
            "@logto/experience@1.19.2",
            "@logto/core@1.40.0",
            "@logto/console@1.37.0",
            "@logto/connector-yunpian-sms@1.2.3",
            "@logto/connector-xiaomi@1.2.4",
            "@logto/connector-x@0.4.3",
            "@logto/connector-whatsapp-sms@1.0.2",
            "@logto/connector-wecom@0.6.0",
            "@logto/connector-wechat-web@1.6.4",
            "@logto/connector-wechat-native@1.4.5",
            "@logto/connector-vonage-sms@0.2.3",
            "@logto/connector-twilio-sms@1.4.3",
            "@logto/connector-tencent-sms@1.4.3",
            "@logto/connector-smtp@1.5.3",
            "@logto/connector-smsbao-sms@1.1.0",
            "@logto/connector-smsaero@1.5.3",
            "@logto/connector-slack@0.3.4",
            "@logto/connector-sendgrid-email@1.5.3",
            "@logto/connector-saml@1.3.5",
            "@logto/connector-qq@1.1.4",
            "@logto/connector-postmark@1.2.3",
            "@logto/connector-patreon@1.2.6",
            "@logto/connector-oidc@1.7.3",
            "@logto/connector-oauth@1.7.6",
            "@logto/connector-naver@1.4.5",
            "@logto/connector-mock-standard-email@3.0.1",
            "@logto/connector-mock-social@1.5.4",
            "@logto/connector-mock-sms@3.0.1",
            "@logto/connector-mock-email@3.0.1",
            "@logto/connector-mailjunky@1.6.0",
            "@logto/connector-mailgun@1.5.5",
            "@logto/connector-logto-social-demo@1.3.5",
            "@logto/connector-logto-email@1.3.5",
            "@logto/connector-linkedin@0.3.4",
            "@logto/connector-line@0.3.4",
            "@logto/connector-kook@0.4.6",
            "@logto/connector-kit@5.0.1",
            "@logto/connector-kakao@1.4.5",
            "@logto/connector-huggingface@0.4.6",
            "@logto/connector-http-email@0.4.2",
            "@logto/connector-google@1.8.4",
            "@logto/connector-gitlab@1.2.6",
            "@logto/connector-github@1.7.4",
            "@logto/connector-gatewayapi-sms@1.2.3",
            "@logto/connector-feishu-web@1.4.5",
            "@logto/connector-facebook@1.6.4",
            "@logto/connector-discord@1.6.4",
            "@logto/connector-dingtalk-web@0.4.4",
            "@logto/connector-azuread@1.6.4",
            "@logto/connector-aws-ses@1.5.3",
            "@logto/connector-apple@1.6.6",
            "@logto/connector-amazon@0.3.4",
            "@logto/connector-aliyun-sms@1.5.3",
            "@logto/connector-aliyun-sms-mas@1.1.0",
            "@logto/connector-aliyun-dm@1.6.0",
            "@logto/connector-alipay-web@1.6.4",
            "@logto/connector-alipay-native@1.4.5",
            "@logto/account@0.4.1",
            "@logto/connector-smsbao-sms@1.0.0",
            "pr-8884-screenshots-1779947396",
            "@logto/connector-mailjunky@1.5.2",
            "@logto/connector-aliyun-sms-mas@1.0.0",
            "v1.39.0",
            "@logto/tunnel@0.3.7",
            "@logto/translate@0.2.12",
            "@logto/shared@3.4.0",
            "@logto/phrases@1.28.0",
            "@logto/phrases-experience@1.13.1",
            "@logto/integration-tests@1.21.0",
            "@logto/experience@1.19.1",
            "@logto/core@1.39.0",
            "@logto/core-kit@2.9.0",
            "@logto/console@1.36.0",
            "@logto/connector-whatsapp-sms@1.0.1",
            "@logto/connector-patreon@1.2.5",
            "@logto/connector-oidc@1.7.2",
            "@logto/connector-oauth@1.7.5",
            "@logto/connector-kook@0.4.5",
            "@logto/connector-huggingface@0.4.5",
            "@logto/connector-gitlab@1.2.5",
            "@logto/connector-apple@1.6.5",
            "@logto/account@0.4.0",
            "@logto/connector-whatsapp-sms@1.0.0",
            "v1.38.0",
            "@logto/tunnel@0.3.6",
            "@logto/translate@0.2.11",
            "@logto/phrases@1.27.0",
            "@logto/phrases-experience@1.13.0",
            "@logto/language-kit@1.3.0",
            "@logto/integration-tests@1.20.0",
            "@logto/experience@1.19.0",
            "@logto/core@1.38.0",
            "@logto/core-kit@2.8.0",
            "@logto/console@1.35.0",
            "@logto/connector-yunpian-sms@1.2.2",
            "@logto/connector-xiaomi@1.2.3",
            "@logto/connector-x@0.4.2",
            "@logto/connector-wecom@0.5.3",
            "@logto/connector-wechat-web@1.6.3",
            "@logto/connector-wechat-native@1.4.4",
            "@logto/connector-vonage-sms@0.2.2",
            "@logto/connector-twilio-sms@1.4.2",
            "@logto/connector-tencent-sms@1.4.2",
            "@logto/connector-smtp@1.5.2",
            "@logto/connector-smsaero@1.5.2",
            "@logto/connector-slack@0.3.3",
            "@logto/connector-sendgrid-email@1.5.2",
            "@logto/connector-saml@1.3.4",
            "@logto/connector-qq@1.1.3",
            "@logto/connector-postmark@1.2.2",
            "@logto/connector-patreon@1.2.4",
            "@logto/connector-oidc@1.7.1",
            "@logto/connector-oauth@1.7.4",
            "@logto/connector-naver@1.4.4",
            "@logto/connector-mock-standard-email@3.0.0",
            "@logto/connector-mock-social@1.5.3",
            "@logto/connector-mock-sms@3.0.0",
            "@logto/connector-mock-email@3.0.0",
            "@logto/connector-mailgun@1.5.4",
            "@logto/connector-logto-social-demo@1.3.4",
            "@logto/connector-logto-email@1.3.4",
            "@logto/connector-linkedin@0.3.3",
            "@logto/connector-line@0.3.3",
            "@logto/connector-kook@0.4.4",
            "@logto/connector-kit@5.0.0",
            "@logto/connector-kakao@1.4.4",
            "@logto/connector-huggingface@0.4.4",
            "@logto/connector-http-sms@0.2.1",
            "@logto/connector-http-email@0.4.1",
            "@logto/connector-google@1.8.3",
            "@logto/connector-gitlab@1.2.4",
            "@logto/connector-github@1.7.3",
            "@logto/connector-gatewayapi-sms@1.2.2",
            "@logto/connector-feishu-web@1.4.4",
            "@logto/connector-facebook@1.6.3",
            "@logto/connector-discord@1.6.3",
            "@logto/connector-dingtalk-web@0.4.3",
            "@logto/connector-azuread@1.6.3",
            "@logto/connector-aws-ses@1.5.2",
            "@logto/connector-apple@1.6.4",
            "@logto/connector-amazon@0.3.3",
            "@logto/connector-aliyun-sms@1.5.2",
            "@logto/connector-aliyun-dm@1.5.2",
            "@logto/connector-alipay-web@1.6.3",
            "@logto/connector-alipay-native@1.4.4",
            "@logto/account@0.3.0",
            "@logto/device-demo-app@0.1.0",
            "v1.37.1",
            "@logto/tunnel@0.3.5",
            "@logto/translate@0.2.10",
            "@logto/phrases-experience@1.12.2",
            "@logto/core@1.37.1",
            "@logto/core-kit@2.7.1",
            "v1.37.0",
            "@logto/translate@0.2.9",
            "@logto/phrases@1.26.0",
            "@logto/integration-tests@1.19.0",
            "@logto/experience@1.18.2",
            "@logto/core@1.37.0",
            "@logto/console@1.34.0",
            "@logto/account@0.2.0",
            "v1.36.0",
            "@logto/tunnel@0.3.4",
            "@logto/translate@0.2.8",
            "@logto/shared@3.3.1",
            "@logto/phrases@1.25.0",
            "@logto/phrases-experience@1.12.1",
            "@logto/integration-tests@1.18.0",
            "@logto/experience@1.18.1",
            "@logto/core@1.36.0",
            "@logto/core-kit@2.7.0",
            "@logto/console@1.33.0",
            "@logto/connector-patreon@1.2.3",
            "@logto/connector-oidc@1.7.0",
            "@logto/connector-oauth@1.7.3",
            "@logto/connector-kook@0.4.3",
            "@logto/connector-huggingface@0.4.3",
            "@logto/connector-gitlab@1.2.3",
            "@logto/connector-apple@1.6.3",
            "v1.35.0",
            "@logto/translate@0.2.7",
            "@logto/phrases@1.24.0",
            "@logto/integration-tests@1.17.0",
            "@logto/experience@1.18.0",
            "@logto/core@1.35.0",
            "@logto/console@1.32.0",
            "@logto/connector-yunpian-sms@1.2.1",
            "@logto/connector-xiaomi@1.2.2",
            "@logto/connector-x@0.4.1",
            "@logto/connector-wecom@0.5.2",
            "@logto/connector-wechat-web@1.6.2",
            "@logto/connector-wechat-native@1.4.3",
            "@logto/connector-vonage-sms@0.2.1",
            "@logto/connector-twilio-sms@1.4.1",
            "@logto/connector-tencent-sms@1.4.1",
            "@logto/connector-smtp@1.5.1",
            "@logto/connector-smsaero@1.5.1",
            "@logto/connector-slack@0.3.2",
            "@logto/connector-sendgrid-email@1.5.1",
            "@logto/connector-saml@1.3.3",
            "@logto/connector-qq@1.1.2",
            "@logto/connector-postmark@1.2.1",
            "@logto/connector-patreon@1.2.2",
            "@logto/connector-oidc@1.6.2",
            "@logto/connector-oauth@1.7.2",
            "@logto/connector-naver@1.4.3",
            "@logto/connector-mock-standard-email@2.2.3",
            "@logto/connector-mock-social@1.5.2",
            "@logto/connector-mock-sms@2.3.2",
            "@logto/connector-mock-email@2.3.2",
            "@logto/connector-mailgun@1.5.3",
            "@logto/connector-logto-social-demo@1.3.3",
            "@logto/connector-logto-email@1.3.3",
            "@logto/connector-linkedin@0.3.2",
            "@logto/connector-line@0.3.2",
            "@logto/connector-kook@0.4.2",
            "@logto/connector-kit@4.7.0",
            "@logto/connector-kakao@1.4.3",
            "@logto/connector-huggingface@0.4.2",
            "@logto/connector-http-sms@0.2.0",
            "@logto/connector-http-email@0.4.0",
            "@logto/connector-google@1.8.2",
            "@logto/connector-gitlab@1.2.2",
            "@logto/connector-github@1.7.2",
            "@logto/connector-gatewayapi-sms@1.2.1",
            "@logto/connector-feishu-web@1.4.3",
            "@logto/connector-facebook@1.6.2",
            "@logto/connector-discord@1.6.2",
            "@logto/connector-dingtalk-web@0.4.2",
            "@logto/connector-azuread@1.6.2",
            "@logto/connector-aws-ses@1.5.1",
            "@logto/connector-apple@1.6.2",
            "@logto/connector-amazon@0.3.2",
            "@logto/connector-aliyun-sms@1.5.1",
            "@logto/connector-aliyun-dm@1.5.1",
            "@logto/connector-alipay-web@1.6.2",
            "@logto/connector-alipay-native@1.4.3",
            "@logto/account@0.1.0",
            "v1.34.0",
            "@logto/translate@0.2.6",
            "@logto/phrases@1.23.0",
            "@logto/integration-tests@1.16.0",
            "@logto/experience@1.17.0",
            "@logto/core@1.34.0",
            "@logto/console@1.31.0",
            "@logto/phrases-account-center@0.1.0",
            "@logto/account-center@0.1.0",
            "v1.33.0",
            "@logto/translate@0.2.5",
            "@logto/phrases@1.22.0",
            "@logto/experience@1.16.1",
            "@logto/core@1.33.0",
            "@logto/console@1.30.0",
            "v1.32.0",
            "@logto/translate@0.2.4",
            "@logto/phrases@1.21.0",
            "@logto/phrases-experience@1.12.0",
            "@logto/integration-tests@1.15.0",
            "@logto/experience@1.16.0",
            "@logto/core@1.32.0",
            "@logto/console@1.29.0",
            "@logto/connector-yunpian-sms@1.2.0",
            "@logto/connector-xiaomi@1.2.1",
            "@logto/connector-x@0.4.0",
            "@logto/connector-wecom@0.5.1",
            "@logto/connector-wechat-web@1.6.1",
            "@logto/connector-wechat-native@1.4.2",
            "@logto/connector-vonage-sms@0.2.0",
            "@logto/connector-twilio-sms@1.4.0",
            "@logto/connector-tencent-sms@1.4.0",
            "@logto/connector-smtp@1.5.0",
            "@logto/connector-smsaero@1.5.0",
            "@logto/connector-slack@0.3.1",
            "@logto/connector-sendgrid-email@1.5.0",
            "@logto/connector-saml@1.3.2",
            "@logto/connector-qq@1.1.1",
            "@logto/connector-postmark@1.2.0",
            "@logto/connector-patreon@1.2.1",
            "@logto/connector-oidc@1.6.1",
            "@logto/connector-oauth@1.7.1",
            "@logto/connector-naver@1.4.2",
            "@logto/connector-mock-standard-email@2.2.2",
            "@logto/connector-mock-social@1.5.1",
            "@logto/connector-mock-sms@2.3.1",
            "@logto/connector-mock-email@2.3.1",
            "@logto/connector-mailgun@1.5.2",
            "@logto/connector-logto-social-demo@1.3.2",
            "@logto/connector-logto-sms@1.3.2",
            "@logto/connector-logto-email@1.3.2",
            "@logto/connector-linkedin@0.3.1",
            "@logto/connector-line@0.3.1",
            "@logto/connector-kook@0.4.1",
            "@logto/connector-kit@4.6.0",
            "@logto/connector-kakao@1.4.2",
            "@logto/connector-huggingface@0.4.1",
            "@logto/connector-http-email@0.3.2",
            "@logto/connector-google@1.8.1",
            "@logto/connector-gitlab@1.2.1",
            "@logto/connector-github@1.7.1",
            "@logto/connector-gatewayapi-sms@1.2.0",
            "@logto/connector-feishu-web@1.4.2",
            "@logto/connector-facebook@1.6.1",
            "@logto/connector-discord@1.6.1",
            "@logto/connector-dingtalk-web@0.4.1",
            "@logto/connector-azuread@1.6.1",
            "@logto/connector-aws-ses@1.5.0",
            "@logto/connector-apple@1.6.1",
            "@logto/connector-amazon@0.3.1",
            "@logto/connector-aliyun-sms@1.5.0",
            "@logto/connector-aliyun-dm@1.5.0",
            "@logto/connector-alipay-web@1.6.1",
            "@logto/connector-alipay-native@1.4.2",
            "v1.31.0",
            "@logto/translate@0.2.3",
            "@logto/phrases@1.20.0",
            "@logto/phrases-experience@1.11.0",
            "@logto/integration-tests@1.14.0",
            "@logto/experience@1.15.0",
            "@logto/core@1.31.0",
            "@logto/console@1.28.0",
            "@logto/connector-http-sms@0.1.0",
            "@logto/connector-mock-sms@2.3.0",
            "@logto/connector-mock-email@2.3.0",
            "@logto/connector-kit@4.5.0",
            "@logto/connector-http-sms@0.0.0",
            "v1.30.1",
            "@logto/tunnel@0.3.3",
            "@logto/translate@0.2.2",
            "@logto/phrases-experience@1.10.1",
            "@logto/core@1.30.1",
            "@logto/core-kit@2.6.1",
            "@logto/console@1.27.0",
            "@logto/connector-yunpian-sms@1.1.1",
            "@logto/connector-xiaomi@1.2.0",
            "@logto/connector-x@0.3.0",
            "@logto/connector-wecom@0.5.0",
            "@logto/connector-wechat-web@1.6.0",
            "@logto/connector-wechat-native@1.4.1",
            "@logto/connector-vonage-sms@0.1.1",
            "@logto/connector-twilio-sms@1.3.1",
            "@logto/connector-tencent-sms@1.3.1",
            "@logto/connector-smtp@1.4.1",
            "@logto/connector-smsaero@1.4.1",
            "@logto/connector-slack@0.3.0",
            "@logto/connector-sendgrid-email@1.4.1",
            "@logto/connector-saml@1.3.1",
            "@logto/connector-qq@1.1.0",
            "@logto/connector-postmark@1.1.1",
            "@logto/connector-patreon@1.2.0",
            "@logto/connector-oidc@1.6.0",
            "@logto/connector-oauth@1.7.0",
            "@logto/connector-naver@1.4.1",
            "@logto/connector-mock-standard-email@2.2.1",
            "@logto/connector-mock-social@1.5.0",
            "@logto/connector-mock-sms@2.2.1",
            "@logto/connector-mock-email@2.2.1",
            "@logto/connector-mailgun@1.5.1",
            "@logto/connector-logto-social-demo@1.3.1",
            "@logto/connector-logto-sms@1.3.1",
            "@logto/connector-logto-email@1.3.1",
            "@logto/connector-linkedin@0.3.0",
            "@logto/connector-line@0.3.0",
            "@logto/connector-kook@0.4.0",
            "@logto/connector-kit@4.4.0",
            "@logto/connector-kakao@1.4.1",
            "@logto/connector-huggingface@0.4.0",
            "@logto/connector-http-email@0.3.1",
            "@logto/connector-google@1.8.0",
            "@logto/connector-gitlab@1.2.0",
            "@logto/connector-github@1.7.0",
            "@logto/connector-gatewayapi-sms@1.1.1",
            "@logto/connector-feishu-web@1.4.1",
            "@logto/connector-facebook@1.6.0",
            "@logto/connector-discord@1.6.0",
            "@logto/connector-dingtalk-web@0.4.0",
            "@logto/connector-azuread@1.6.0",
            "@logto/connector-aws-ses@1.4.1",
            "@logto/connector-apple@1.6.0",
            "@logto/connector-amazon@0.3.0",
            "@logto/connector-aliyun-sms@1.4.1",
            "@logto/connector-aliyun-dm@1.4.1",
            "@logto/connector-alipay-web@1.6.0",
            "@logto/connector-alipay-native@1.4.1",
            "@logto/api@1.30.0",
            "@logto/api@0.0.0",
            "v1.29.0",
            "@logto/tunnel@0.3.2",
            "@logto/integration-tests@1.13.1",
            "@logto/core@1.29.0",
            "@logto/console@1.26.0",
            "v1.28.0",
            "@logto/tunnel@0.3.1",
            "@logto/translate@0.2.1",
            "@logto/shared@3.3.0",
            "@logto/integration-tests@1.13.0",
            "@logto/experience@1.14.0",
            "@logto/core@1.28.0",
            "@logto/console@1.25.0",
            "@logto/connector-qq@1.0.0",
            "@logto/connector-qq@0.1.0",
            "v1.27.0",
            "@logto/tunnel@0.3.0",
            "@logto/translate@0.2.0",
            "@logto/shared@3.2.0",
            "@logto/phrases@1.19.0",
            "@logto/phrases-experience@1.10.0",
            "@logto/language-kit@1.2.0",
            "@logto/integration-tests@1.12.0",
            "@logto/experience@1.13.0",
            "@logto/elements@0.1.0",
            "@logto/demo-app@1.5.0",
            "@logto/core@1.27.0",
            "@logto/core-kit@2.6.0",
            "@logto/console@1.24.0",
            "@logto/connector-yunpian-sms@1.1.0",
            "@logto/connector-xiaomi@1.1.0",
            "@logto/connector-x@0.2.0",
            "@logto/connector-wecom@0.4.0",
            "@logto/connector-wechat-web@1.5.0",
            "@logto/connector-wechat-native@1.4.0",
            "@logto/connector-vonage-sms@0.1.0",
            "@logto/connector-twilio-sms@1.3.0",
            "@logto/connector-tencent-sms@1.3.0",
            "@logto/connector-smtp@1.4.0",
            "@logto/connector-smsaero@1.4.0",
            "@logto/connector-slack@0.2.0",
            "@logto/connector-sendgrid-email@1.4.0",
            "@logto/connector-saml@1.3.0",
            "@logto/connector-postmark@1.1.0",
            "@logto/connector-patreon@1.1.0",
            "@logto/connector-oidc@1.5.0",
            "@logto/connector-oauth@1.6.0",
            "@logto/connector-naver@1.4.0",
            "@logto/connector-mock-standard-email@2.2.0",
            "@logto/connector-mock-social@1.4.0",
            "@logto/connector-mock-sms@2.2.0",
            "@logto/connector-mock-email@2.2.0",
            "@logto/connector-mailgun@1.5.0",
            "@logto/connector-logto-social-demo@1.3.0",
            "@logto/connector-logto-sms@1.3.0",
            "@logto/connector-logto-email@1.3.0",
            "@logto/connector-linkedin@0.2.0",
            "@logto/connector-line@0.2.0",
            "@logto/connector-kook@0.3.0",
            "@logto/connector-kit@4.3.0",
            "@logto/connector-kakao@1.4.0",
            "@logto/connector-huggingface@0.3.0",
            "@logto/connector-http-email@0.3.0",
            "@logto/connector-google@1.7.0",
            "@logto/connector-gitlab@1.1.0",
            "@logto/connector-github@1.6.0",
            "@logto/connector-gatewayapi-sms@1.1.0",
            "@logto/connector-feishu-web@1.4.0",
            "@logto/connector-facebook@1.5.0",
            "@logto/connector-discord@1.5.0",
            "@logto/connector-dingtalk-web@0.3.0",
            "@logto/connector-azuread@1.5.0",
            "@logto/connector-aws-ses@1.4.0",
            "@logto/connector-apple@1.5.0",
            "@logto/connector-amazon@0.2.0",
            "@logto/connector-aliyun-sms@1.4.0",
            "@logto/connector-aliyun-dm@1.4.0",
            "@logto/connector-alipay-web@1.5.0",
            "@logto/connector-alipay-native@1.4.0",
            "@logto/app-insights@2.1.0",
            "v1.26.0",
            "@logto/translate@0.1.3",
            "@logto/language-kit@1.1.3",
            "@logto/experience@1.12.0",
            "@logto/core@1.26.0",
            "@logto/console@1.23.0",
            "@logto/connector-azuread@1.4.2",
            "@logto/translate@0.1.2",
            "@logto/language-kit@1.1.2",
            "v1.25.0",
            "@logto/core@1.25.0",
            "@logto/console@1.22.1",
            "@logto/connector-x@0.1.1",
            "@logto/connector-smtp@1.3.0",
            "@logto/connector-sendgrid-email@1.3.0",
            "@logto/connector-mailgun@1.4.0",
            "@logto/connector-line@0.1.1",
            "@logto/connector-kit@4.2.0",
            "@logto/connector-aws-ses@1.3.0",
            "@logto/connector-amazon@0.1.1",
            "@logto/connector-aliyun-sms@1.3.0",
            "@logto/connector-aliyun-dm@1.3.0",
            "@logto/tunnel@0.2.6",
            "v1.24.1",
            "@logto/tunnel@0.2.5",
            "@logto/translate@0.1.1",
            "@logto/shared@3.1.4",
            "@logto/phrases@1.18.0",
            "@logto/phrases-experience@1.9.1",
            "@logto/language-kit@1.1.1",
            "@logto/integration-tests@1.11.1",
            "@logto/experience@1.11.2",
            "@logto/experience-legacy@1.11.1",
            "@logto/elements@0.0.2",
            "@logto/demo-app@1.4.2",
            "@logto/core@1.24.1",
            "@logto/core-kit@2.5.4",
            "@logto/console@1.22.0",
            "@logto/connector-yunpian-sms@1.0.1",
            "@logto/connector-xiaomi@1.0.1",
            "@logto/connector-x@0.1.0",
            "@logto/connector-wecom@0.3.2",
            "@logto/connector-wechat-web@1.4.1",
            "@logto/connector-wechat-native@1.3.1",
            "@logto/connector-vonage-sms@0.0.1",
            "@logto/connector-twilio-sms@1.2.1",
            "@logto/connector-tencent-sms@1.2.1",
            "@logto/connector-smtp@1.2.1",
            "@logto/connector-smsaero@1.3.1",
            "@logto/connector-slack@0.1.0",
            "@logto/connector-sendgrid-email@1.2.1",
            "@logto/connector-saml@1.2.1",
            "@logto/connector-postmark@1.0.1",
            "@logto/connector-patreon@1.0.1",
            "@logto/connector-oidc@1.4.1",
            "@logto/connector-oauth@1.5.1",
            "@logto/connector-naver@1.3.1",
            "@logto/connector-mock-standard-email@2.1.1",
            "@logto/connector-mock-social@1.3.1",
            "@logto/connector-mock-sms@2.1.1",
            "@logto/connector-mock-email@2.1.1",
            "@logto/connector-mailgun@1.3.1",
            "@logto/connector-logto-social-demo@1.2.1",
            "@logto/connector-logto-sms@1.2.1",
            "@logto/connector-logto-email@1.2.1",
            "@logto/connector-linkedin@0.1.0",
            "@logto/connector-line@0.1.0",
            "@logto/connector-kook@0.2.1",
            "@logto/connector-kit@4.1.1",
            "@logto/connector-kakao@1.3.1",
            "@logto/connector-huggingface@0.2.1",
            "@logto/connector-http-email@0.2.1",
            "@logto/connector-google@1.6.1",
            "@logto/connector-gitlab@1.0.1",
            "@logto/connector-github@1.5.1",
            "@logto/connector-gatewayapi-sms@1.0.1",
            "@logto/connector-feishu-web@1.3.1",
            "@logto/connector-facebook@1.4.1",
            "@logto/connector-discord@1.4.1",
            "@logto/connector-dingtalk-web@0.2.1",
            "@logto/connector-azuread@1.4.1",
            "@logto/connector-aws-ses@1.2.1",
            "@logto/connector-apple@1.4.1",
            "@logto/connector-amazon@0.1.0",
            "@logto/connector-aliyun-sms@1.2.1",
            "@logto/connector-aliyun-dm@1.2.1",
            "@logto/connector-alipay-web@1.4.1",
            "@logto/connector-alipay-native@1.3.1",
            "@logto/app-insights@2.0.1",
            "@logto/connector-amazon@0.0.0",
            "@logto/connector-linkedin@0.0.0",
            "@logto/connector-slack@0.0.0",
            "@logto/connector-x@0.0.0",
            "v1.24.0",
            "@logto/phrases@1.17.0",
            "@logto/core@1.24.0",
            "@logto/console@1.21.0",
            "@logto/tunnel@0.2.4",
            "@logto/shared@3.1.3",
            "@logto/core-kit@2.5.3",
            "@logto/connector-http-email@0.2.0",
            "v1.23.1",
            "@logto/experience@1.11.1",
            "@logto/core@1.23.1",
            "v1.23.0",
            "@logto/tunnel@0.2.3",
            "@logto/phrases@1.16.0",
            "@logto/integration-tests@1.11.0",
            "@logto/experience@1.11.0",
            "@logto/experience-legacy@1.11.0",
            "@logto/core@1.23.0",
            "@logto/core-kit@2.5.2",
            "@logto/console@1.20.0",
            "@logto/connector-yunpian-sms@1.0.0",
            "@logto/connector-xiaomi@1.0.0",
            "v1.22.0",
            "@logto/phrases@1.15.0",
            "@logto/phrases-experience@1.9.0",
            "@logto/integration-tests@1.10.0",
            "@logto/experience@1.10.0",
            "@logto/experience-legacy@1.10.0",
            "@logto/core@1.22.0",
            "@logto/console@1.19.0",
            "@logto/connector-kit@4.1.0",
            "@logto/connector-vonage-sms@0.0.0",
            "v1.21.0",
            "@logto/tunnel@0.2.2",
            "@logto/shared@3.1.2",
            "@logto/phrases@1.14.1",
            "@logto/core@1.21.0",
            "@logto/console@1.18.1",
            "@logto/connector-google@1.6.0",
            "@logto/connector-gatewayapi-sms@1.0.0",
            "@logto/connector-gatewayapi-sms@0.0.0",
            "@logto/tunnel@0.2.1",
            "@logto/core-kit@2.5.1",
            "@logto/connector-http-email@0.1.0",
            "v1.20.0",
            "@logto/translate@0.1.0",
            "@logto/phrases@1.14.0",
            "@logto/phrases-experience@1.8.0",
            "@logto/integration-tests@1.9.0",
            "@logto/experience@1.9.0",
            "@logto/experience-legacy@1.9.0",
            "@logto/elements@0.0.1",
            "@logto/demo-app@1.4.1",
            "@logto/core@1.20.0",
            "@logto/console@1.18.0",
            "@logto/connector-wecom@0.3.1",
            "@logto/connector-patreon@1.0.0",
            "@logto/connector-oauth@1.5.0",
            "@logto/connector-kook@0.2.0",
            "@logto/connector-gitlab@1.0.0",
            "@logto/experience-legacy@1.8.0",
            "@logto/tunnel@0.2.0",
            "@logto/connector-gitlab@0.0.1",
            "@logto/connector-patreon@0.0.1",
            "@logto/tunnel@0.1.0",
            "@logto/tunnel@0.0.0",
            "@logto/translate@0.0.0",
            "@logto/connector-kook@0.1.0",
            "v1.19.0",
            "@logto/phrases@1.13.0",
            "@logto/integration-tests@1.8.0",
            "@logto/experience@1.8.0",
            "@logto/demo-app@1.4.0",
            "@logto/core@1.19.0",
            "@logto/console@1.17.0",
            "@logto/connector-wecom@0.3.0",
            "@logto/connector-wechat-web@1.4.0",
            "@logto/connector-wechat-native@1.3.0",
            "@logto/connector-twilio-sms@1.2.0",
            "@logto/connector-tencent-sms@1.2.0",
            "@logto/connector-smtp@1.2.0",
            "@logto/connector-smsaero@1.3.0",
            "@logto/connector-sendgrid-email@1.2.0",
            "@logto/connector-saml@1.2.0",
            "@logto/connector-oidc@1.4.0",
            "@logto/connector-oauth@1.4.0",
            "@logto/connector-naver@1.3.0",
            "@logto/connector-mock-standard-email@2.1.0",
            "@logto/connector-mock-social@1.3.0",
            "@logto/connector-mock-sms@2.1.0",
            "@logto/connector-mock-email@2.1.0",
            "@logto/connector-mailgun@1.3.0",
            "@logto/connector-logto-social-demo@1.2.0",
            "@logto/connector-logto-sms@1.2.0",
            "@logto/connector-logto-email@1.2.0",
            "@logto/connector-kakao@1.3.0",
            "@logto/connector-huggingface@0.2.0",
            "@logto/connector-google@1.5.0",
            "@logto/connector-github@1.5.0",
            "@logto/connector-feishu-web@1.3.0",
            "@logto/connector-facebook@1.4.0",
            "@logto/connector-discord@1.4.0",
            "@logto/connector-dingtalk-web@0.2.0",
            "@logto/connector-azuread@1.4.0",
            "@logto/connector-aws-ses@1.2.0",
            "@logto/connector-apple@1.4.0",
            "@logto/connector-aliyun-sms@1.2.0",
            "@logto/connector-aliyun-dm@1.2.0",
            "@logto/connector-alipay-web@1.4.0",
            "@logto/connector-alipay-native@1.3.0",
            "@logto/connector-postmark@0.0.0",
            "@logto/connector-postmark@1.0.0",
            "@logto/elements@0.0.0",
            "v1.18.0",
            "@logto/phrases@1.12.0",
            "@logto/phrases-experience@1.7.0",
            "@logto/integration-tests@1.7.0",
            "@logto/experience@1.7.0",
            "@logto/demo-app@1.3.0",
            "@logto/core@1.18.0",
            "@logto/console@1.16.0",
            "@logto/connector-wecom@0.2.1",
            "@logto/connector-wechat-web@1.3.1",
            "@logto/connector-wechat-native@1.2.1",
            "@logto/connector-twilio-sms@1.1.2",
            "@logto/connector-tencent-sms@1.1.2",
            "@logto/connector-smtp@1.1.3",
            "@logto/connector-smsaero@1.2.2",
            "@logto/connector-sendgrid-email@1.1.2",
            "@logto/connector-saml@1.1.2",
            "@logto/connector-oidc@1.3.1",
            "@logto/connector-oauth@1.3.1",
            "@logto/connector-naver@1.2.1",
            "@logto/connector-mock-standard-email@2.0.2",
            "@logto/connector-mock-social@1.2.1",
            "@logto/connector-mock-sms@2.0.2",
            "@logto/connector-mock-email@2.0.2",
            "@logto/connector-mailgun@1.2.2",
            "@logto/connector-logto-social-demo@1.1.2",
            "@logto/connector-logto-sms@1.1.2",
            "@logto/connector-logto-email@1.1.2",
            "@logto/connector-kit@4.0.0",
            "@logto/connector-kakao@1.2.1",
            "@logto/connector-huggingface@0.1.1",
            "@logto/connector-google@1.4.0",
            "@logto/connector-github@1.4.2",
            "@logto/connector-feishu-web@1.2.1",
            "@logto/connector-facebook@1.3.1",
            "@logto/connector-discord@1.3.1",
            "@logto/connector-dingtalk-web@0.1.1",
            "@logto/connector-azuread@1.3.0",
            "@logto/connector-aws-ses@1.1.2",
            "@logto/connector-apple@1.3.1",
            "@logto/connector-aliyun-sms@1.1.2",
            "@logto/connector-aliyun-dm@1.1.2",
            "@logto/connector-alipay-web@1.3.1",
            "@logto/connector-alipay-native@1.2.1",
            "v1.17.0",
            "@logto/phrases@1.11.0",
            "@logto/experience@1.6.2",
            "@logto/core@1.17.0",
            "@logto/core-kit@2.5.0",
            "@logto/console@1.15.0",
            "@logto/connector-github@1.4.1",
            "@logto/connector-dingtalk-web@0.1.0",
            "@logto/connector-dingtalk-web@0.0.0",
            "@logto/connector-dingtalk-web@1.0.0",
            "v1.16.0",
            "@logto/shared@3.1.1",
            "@logto/phrases@1.10.1",
            "@logto/integration-tests@1.6.1",
            "@logto/experience@1.6.1",
            "@logto/core@1.16.0",
            "@logto/console@1.14.0",
            "@logto/connector-oidc@1.3.0",
            "@logto/connector-oauth@1.3.0",
            "@logto/connector-huggingface@0.1.0",
            "@logto/connector-github@1.4.0",
            "@logto/app-insights@2.0.0",
            "@logto/connector-huggingface@0.0.0",
            "v1.15.0",
            "@logto/phrases@1.10.0",
            "@logto/phrases-experience@1.6.1",
            "@logto/integration-tests@1.6.0",
            "@logto/experience@1.6.0",
            "@logto/demo-app@1.2.0",
            "@logto/core@1.15.0",
            "@logto/core-kit@2.4.0",
            "@logto/console@1.13.0",
            "@logto/connector-wecom@0.2.0",
            "@logto/connector-wechat-web@1.3.0",
            "@logto/connector-wechat-native@1.2.0",
            "@logto/connector-twilio-sms@1.1.1",
            "@logto/connector-tencent-sms@1.1.1",
            "@logto/connector-smtp@1.1.2",
            "@logto/connector-smsaero@1.2.1",
            "@logto/connector-sendgrid-email@1.1.1",
            "@logto/connector-saml@1.1.1",
            "@logto/connector-oidc@1.2.0",
            "@logto/connector-oauth@1.2.0",
            "@logto/connector-naver@1.2.0",
            "@logto/connector-mock-standard-email@2.0.1",
            "@logto/connector-mock-social@1.2.0",
            "@logto/connector-mock-sms@2.0.1",
            "@logto/connector-mock-email@2.0.1",
            "@logto/connector-mailgun@1.2.1",
            "@logto/connector-logto-social-demo@1.1.1",
            "@logto/connector-logto-sms@1.1.1",
            "@logto/connector-logto-email@1.1.1",
            "@logto/connector-kit@3.0.0",
            "@logto/connector-kakao@1.2.0",
            "@logto/connector-google@1.3.0",
            "@logto/connector-github@1.3.0",
            "@logto/connector-feishu-web@1.2.0",
            "@logto/connector-facebook@1.3.0",
            "@logto/connector-discord@1.3.0",
            "@logto/connector-azuread@1.2.0",
            "@logto/connector-aws-ses@1.1.1",
            "@logto/connector-apple@1.3.0",
            "@logto/connector-aliyun-sms@1.1.1",
            "@logto/connector-aliyun-dm@1.1.1",
            "@logto/connector-alipay-web@1.3.0",
            "@logto/connector-alipay-native@1.2.0",
            "v1.14.0",
            "@logto/core@1.14.0",
            "@logto/connector-smtp@1.1.1",
            "@logto/connector-apple@1.2.0",
            "@logto/connector-wecom@0.1.0",
            "v1.13.1",
            "@logto/core@1.13.1",
            "@logto/console@1.12.1",
            "v1.13.0",
            "@logto/shared@3.1.0",
            "@logto/phrases@1.9.0",
            "@logto/phrases-experience@1.6.0",
            "@logto/language-kit@1.1.0",
            "@logto/integration-tests@1.5.0",
            "@logto/experience@1.5.0",
            "@logto/demo-app@1.1.0",
            "@logto/core@1.13.0",
            "@logto/core-kit@2.3.0",
            "@logto/console@1.12.0",
            "@logto/connector-wechat-web@1.2.0",
            "@logto/connector-wechat-native@1.1.0",
            "@logto/connector-twilio-sms@1.1.0",
            "@logto/connector-tencent-sms@1.1.0",
            "@logto/connector-smtp@1.1.0",
            "@logto/connector-smsaero@1.2.0",
            "@logto/connector-sendgrid-email@1.1.0",
            "@logto/connector-saml@1.1.0",
            "@logto/connector-oidc@1.1.0",
            "@logto/connector-oauth@1.1.0",
            "@logto/connector-naver@1.1.0",
            "@logto/connector-mock-standard-email@2.0.0",
            "@logto/connector-mock-social@1.1.0",
            "@logto/connector-mock-sms@2.0.0",
            "@logto/connector-mock-email@2.0.0",
            "@logto/connector-mailgun@1.2.0",
            "@logto/connector-logto-social-demo@1.1.0",
            "@logto/connector-logto-sms@1.1.0",
            "@logto/connector-logto-email@1.1.0",
            "@logto/connector-kit@2.1.0",
            "@logto/connector-kakao@1.1.0",
            "@logto/connector-google@1.2.0",
            "@logto/connector-github@1.2.0",
            "@logto/connector-feishu-web@1.1.0",
            "@logto/connector-facebook@1.2.0",
            "@logto/connector-discord@1.2.0",
            "@logto/connector-azuread@1.1.0",
            "@logto/connector-aws-ses@1.1.0",
            "@logto/connector-apple@1.1.0",
            "@logto/connector-aliyun-sms@1.1.0",
            "@logto/connector-aliyun-dm@1.1.0",
            "@logto/connector-alipay-web@1.2.0",
            "@logto/connector-alipay-native@1.1.0",
            "@logto/app-insights@1.4.0",
            "v1.12.0",
            "@logto/phrases@1.8.0",
            "@logto/phrases-experience@1.5.0",
            "@logto/integration-tests@1.4.3",
            "@logto/experience@1.4.0",
            "@logto/core@1.12.0",
            "@logto/core-kit@2.2.1",
            "@logto/console@1.11.0",
            "v1.11.0",
            "@logto/phrases@1.7.0",
            "@logto/phrases-experience@1.4.0",
            "@logto/experience@1.3.0",
            "@logto/core@1.11.0",
            "@logto/console@1.10.0",
            "v1.10.1",
            "@logto/phrases@1.6.0",
            "@logto/integration-tests@1.4.2",
            "@logto/core@1.10.1",
            "@logto/console@1.9.0",
            "@logto/connector-wechat-web@1.1.1",
            "@logto/connector-wechat-native@1.0.1",
            "@logto/connector-twilio-sms@1.0.1",
            "@logto/connector-tencent-sms@1.0.1",
            "@logto/connector-smtp@1.0.1",
            "@logto/connector-smsaero@1.1.1",
            "@logto/connector-sendgrid-email@1.0.2",
            "@logto/connector-saml@1.0.2",
            "@logto/connector-oidc@1.0.3",
            "@logto/connector-oauth@1.0.1",
            "@logto/connector-naver@1.0.1",
            "@logto/connector-mock-standard-email@1.0.1",
            "@logto/connector-mock-social@1.0.1",
            "@logto/connector-mock-sms@1.0.1",
            "@logto/connector-mock-email@1.0.1",
            "@logto/connector-mailgun@1.1.1",
            "@logto/connector-logto-social-demo@1.0.1",
            "@logto/connector-logto-sms@1.0.1",
            "@logto/connector-logto-email@1.0.1",
            "@logto/connector-kit@2.0.0",
            "@logto/connector-kakao@1.0.1",
            "@logto/connector-google@1.1.1",
            "@logto/connector-github@1.1.1",
            "@logto/connector-feishu-web@1.0.1",
            "@logto/connector-facebook@1.1.1",
            "@logto/connector-discord@1.1.1",
            "@logto/connector-azuread@1.0.1",
            "@logto/connector-aws-ses@1.0.2",
            "@logto/connector-apple@1.0.3",
            "@logto/connector-aliyun-sms@1.0.2",
            "@logto/connector-aliyun-dm@1.0.2",
            "@logto/connector-alipay-web@1.1.1",
            "@logto/connector-alipay-native@1.0.1",
            "v1.10.0",
            "@logto/core@1.10.0",
            "@logto/core-kit@2.2.0",
            "v1.9.2",
            "@logto/shared@3.0.0",
            "@logto/core@1.9.2",
            "@logto/core-kit@2.1.2",
            "@logto/console@1.8.0",
            "@logto/connector-oidc@1.0.2",
            "@logto/connector-apple@1.0.2",
            "v1.9.1",
            "@logto/phrases-experience@1.3.1",
            "@logto/experience@1.2.1",
            "@logto/core@1.9.1",
            "@logto/core-kit@2.1.1",
            "@logto/console@1.7.1",
            "v1.9.0",
            "@logto/shared@2.0.1",
            "@logto/phrases@1.5.0",
            "@logto/phrases-experience@1.3.0",
            "@logto/integration-tests@1.4.1",
            "@logto/experience@1.2.0",
            "@logto/core@1.9.0",
            "@logto/core-kit@2.1.0",
            "@logto/console@1.7.0",
            "@logto/experience@1.1.5",
            "@logto/phrases-experience@1.2.0",
            "v1.8.0",
            "@logto/core@1.8.0",
            "@logto/console@1.6.0",
            "@logto/connector-sendgrid-email@1.0.1",
            "@logto/connector-mailgun@1.1.0",
            "@logto/connector-mailgun@1.0.0",
            "v1.7.0",
            "@logto/core@1.7.0",
            "@logto/console@1.5.1",
            "@logto/connector-smsaero@1.1.0",
            "@logto/connector-smsaero@1.0.0",
            "v1.6.0",
            "@logto/ui@1.1.5",
            "@logto/phrases@1.4.1",
            "@logto/integration-tests@1.4.0",
            "@logto/core@1.6.0",
            "@logto/core-kit@2.0.1",
            "@logto/console@1.5.0",
            "@logto/app-insights@1.3.1",
            "v1.5.0",
            "@logto/phrases@1.4.0",
            "@logto/integration-tests@1.3.0",
            "@logto/core@1.5.0",
            "@logto/console@1.4.0",
            "@logto/connector-aliyun-sms@1.0.1",
            "@logto/connector-aliyun-dm@1.0.1",
            "@logto/cloud@0.2.6",
            "v1.3.0",
            "@logto/core@1.3.0",
            "@logto/console@1.2.4",
            "@logto/connector-saml@1.0.1",
            "@logto/app-insights@1.3.0",
            "v1.2.3",
            "@logto/ui@1.1.4",
            "@logto/demo-app@1.0.1",
            "@logto/core@1.2.3",
            "@logto/console@1.2.3",
            "@logto/connector-wechat-web@1.1.0",
            "@logto/connector-google@1.1.0",
            "@logto/connector-github@1.1.0",
            "@logto/connector-facebook@1.1.0",
            "@logto/connector-discord@1.1.0",
            "@logto/connector-aws-ses@1.0.1",
            "@logto/connector-alipay-web@1.1.0",
            "v1.2.2",
            "@logto/ui@1.1.3",
            "@logto/core@1.2.2",
            "@logto/console@1.2.2",
            "@logto/app-insights@1.2.0",
            "v1.2.1",
            "@logto/ui@1.1.2",
            "@logto/core@1.2.1",
            "@logto/console@1.2.1",
            "@logto/app-insights@1.1.0",
            "@logto/app-insights@1.0.1",
            "v1.2.0",
            "@logto/ui@1.1.1",
            "@logto/shared@2.0.0",
            "@logto/phrases@1.2.0",
            "@logto/phrases-ui@1.2.0",
            "@logto/core@1.2.0",
            "@logto/core-kit@2.0.0",
            "@logto/console@1.2.0",
            "@logto/connector-oidc@1.0.1",
            "@logto/connector-kit@1.1.1",
            "@logto/connector-apple@1.0.1",
            "@logto/cloud@0.2.5",
            "@logto/ui@1.1.0",
            "@logto/integration-tests@1.1.0",
            "@logto/console@1.1.0",
            "@logto/connector-wechat-web@1.0.0",
            "@logto/connector-wechat-native@1.0.0",
            "@logto/connector-twilio-sms@1.0.0",
            "@logto/connector-tencent-sms@1.0.0",
            "@logto/connector-smtp@1.0.0",
            "@logto/connector-sendgrid-email@1.0.0",
            "@logto/connector-saml@1.0.0",
            "@logto/connector-oidc@1.0.0",
            "@logto/connector-oauth@1.0.0",
            "@logto/connector-naver@1.0.0",
            "@logto/connector-mock-standard-email@1.0.0",
            "@logto/connector-mock-social@1.0.0",
            "@logto/connector-mock-sms@1.0.0",
            "@logto/connector-mock-email@1.0.0",
            "@logto/connector-logto-social-demo@1.0.0",
            "@logto/connector-logto-sms@1.0.0",
            "@logto/connector-logto-email@1.0.0",
            "@logto/connector-kakao@1.0.0",
            "@logto/connector-google@1.0.0",
            "@logto/connector-github@1.0.0",
            "@logto/connector-feishu-web@1.0.0",
            "@logto/connector-facebook@1.0.0",
            "@logto/connector-discord@1.0.0",
            "@logto/connector-azuread@1.0.0",
            "@logto/connector-aws-ses@1.0.0",
            "@logto/connector-apple@1.0.0",
            "@logto/connector-aliyun-sms@1.0.0",
            "@logto/connector-aliyun-dm@1.0.0",
            "@logto/connector-alipay-web@1.0.0",
            "@logto/connector-alipay-native@1.0.0",
            "v1.1.0",
            "@logto/shared@1.0.3",
            "@logto/schemas@1.1.0",
            "@logto/phrases@1.1.0",
            "@logto/phrases-ui@1.1.0",
            "@logto/core@1.1.0",
            "@logto/cloud@0.2.4",
            "@logto/app-insights@1.0.0",
            "v1.0.2",
            "@logto/shared@1.0.1",
            "@logto/schemas@1.0.1",
            "@logto/core@1.0.2",
            "@logto/cloud@0.2.2",
            "v1.0.1",
            "@logto/core@1.0.1",
            "@logto/cloud@0.2.1",
            "v1.0.0",
            "@logto/language-kit@1.0.0",
            "@logto/core-kit@1.0.0",
            "@logto/connector-kit@1.0.0",
            "@logto/connector-kit@1.0.0-rc.3",
            "v1.0.0-rc.2",
            "@logto/core@1.0.0-rc.2",
            "@logto/connector-kit@1.0.0-rc.2",
            "v1.0.0-rc.1",
            "@logto/core@1.0.0-rc.1",
            "@logto/cloud@0.1.0",
            "@logto/connector-kit@1.0.0-rc.1",
            "v1.0.0-rc.0",
            "@logto/shared@1.0.0-rc.0",
            "@logto/schemas@1.0.0-rc.0",
            "@logto/phrases@1.0.0-rc.0",
            "@logto/phrases-ui@1.0.0-rc.0",
            "@logto/language-kit@1.0.0-rc.0",
            "@logto/demo-app@1.0.0-rc.0",
            "@logto/core@1.0.0-rc.0",
            "@logto/core-kit@1.0.0-rc.0",
            "@logto/connector-kit@1.0.0-rc.0",
            "@logto/connector-kit@1.0.0-beta.33",
            "v1.0.0-beta.18",
            "@logto/shared@1.0.0-beta.17",
            "@logto/schemas@1.0.0-beta.17",
            "@logto/phrases@1.0.0-beta.17",
            "@logto/phrases-ui@1.0.0-beta.17",
            "@logto/demo-app@1.0.0-beta.13",
            "@logto/core@1.0.0-beta.18",
            "@logto/connector-kit@1.0.0-beta.32",
            "@logto/language-kit@1.0.0-beta.30",
            "@logto/core-kit@1.0.0-beta.30",
            "@logto/connector-kit@1.0.0-beta.31",
            "@logto/shared@1.0.0-beta.16",
            "@logto/phrases@1.0.0-beta.16",
            "@logto/phrases-ui@1.0.0-beta.13",
            "@logto/language-kit@1.0.0-beta.29",
            "@logto/demo-app@1.0.0-beta.12",
            "@logto/core-kit@1.0.0-beta.29",
            "v1.0.0-beta.13",
            "@logto/schemas@1.0.0-beta.13",
            "@logto/core@1.0.0-beta.13",
            "@logto/cli@1.0.0-beta.13",
            "v1.0.0-beta.12",
            "v1.0.0-beta.11",
            "v1.0.0-beta.10",
            "v1.0.0-beta.9",
            "v1.0.0-beta.8",
            "v1.0.0-beta.6",
            "v1.0.0-beta.5",
            "v1.0.0-beta.4",
            "v1.0.0-beta.3",
            "v1.0.0-beta.2",
            "v1.0.0-beta.1",
            "v1.0.0-beta.0",
            "v1.0.0-alpha.4",
            "v1.0.0-alpha.3",
            "v1.0.0-alpha.2",
            "v1.0.0-alpha.1",
            "v1.0.0-alpha.0",
            "v0.1.2-alpha.5",
            "v0.1.2-alpha.4",
            "v0.1.2-alpha.3",
            "v0.1.2-alpha.2",
            "v0.1.2-alpha.1",
            "v0.1.2-alpha.0",
            "v0.1.1-alpha.0",
            "v0.1.0-internal"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55377.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:26.488103513Z",
      "provider": "osv",
      "references": [
        "https://github.com/logto-io/logto/releases/tag/v1.41.0",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55377.json",
        "https://github.com/logto-io/logto/security/advisories/GHSA-q4h3-38gc-4p4j",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-55377",
        "https://github.com/logto-io/logto/commit/f56255a7edf3b22b0ec2fdb814814ce6b0123b74",
        "https://github.com/logto-io/logto/pull/9110"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-287"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55377.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-55377",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 493118,
  "published_at": "2026-07-10T19:57:58.088+00:00"
}