node-authenticate-pam
node-authenticate-pam copied to clipboard
fix PAM authorization bypass
see https://huntr.dev/bounties/09fb00bd-d95e-4cc5-a989-0ee0960922da/
fix is based on https://github.com/github/codeql/blob/bbd7e623418e41775c90cfbbe44ad25b3bf9c5e3/cpp/ql/src/experimental/Security/CWE/CWE-285/PamAuthorizationGood.cpp