node

Sep 26, 2024 GO-2026-4801

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Changes in this version

+ func WithMaxLengthInputAttribute(maxLength int) func(a *InputAttributes)

type AnchorAttributes

+ func (a *AnchorAttributes) Matches(other Attributes) bool

type Attributes

+ Matches func(other Attributes) bool

type ImageAttributes

+ func (a *ImageAttributes) Matches(other Attributes) bool

type InputAttributes

+ MaxLength int

+ OnClickTrigger js.WebAuthnTriggers

+ OnLoadTrigger js.WebAuthnTriggers

+ func (a *InputAttributes) Matches(other Attributes) bool

type Node

+ func (n *Node) Matches(needle *Node) bool

type Nodes

+ func (n *Nodes) RemoveMatching(node *Node)

type ScriptAttributes

+ func (a *ScriptAttributes) Matches(other Attributes) bool

type TextAttributes

+ func (a *TextAttributes) Matches(other Attributes) bool

type UiNodeGroup

+ const IdentifierFirstGroup

Sep 25, 2024 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jun 5, 2024 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Changes in this version

+ const PasskeyChallenge

+ const PasskeyCreateData

+ const PasskeyLogin

+ const PasskeyLoginTrigger

+ const PasskeyRegister

+ const PasskeyRegisterTrigger

+ const PasskeyRemove

+ const PasskeySettingsRegister

+ const ProfileChooseCredentials

type InputAttributes

+ OnLoad string

type UiNodeGroup

+ const PasskeyGroup

Jun 4, 2024 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Feb 20, 2024 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Feb 1, 2024 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jul 12, 2023 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jul 12, 2023 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jul 6, 2023 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Apr 18, 2023 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jan 14, 2023 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Dec 2, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Changes in this version

type InputAttributes

+ Autocomplete UiNodeInputAttributeAutocomplete

type UiNodeGroup

+ const CodeGroup

+ type UiNodeInputAttributeAutocomplete string

+ const InputAttributeAutocompleteCurrentPassword

+ const InputAttributeAutocompleteEmail

+ const InputAttributeAutocompleteNewPassword

+ const InputAttributeAutocompleteOneTimeCode

+ const InputAttributeAutocompleteTel

+ const InputAttributeAutocompleteUrl

+ type UiNodeInputAttributeType string

+ const InputAttributeTypeTel

Nov 28, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Nov 21, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Nov 16, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jun 1, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

May 30, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Changes in this version

+ const DisableFormField

+ const LookupCodeEnter

+ const LookupCodes

+ const LookupConfirm

+ const LookupDisable

+ const LookupRegenerate

+ const LookupReveal

+ const TOTPCode

+ const TOTPQR

+ const TOTPSecretKey

+ const TOTPUnlink

+ const WebAuthnLogin

+ const WebAuthnLoginTrigger

+ const WebAuthnRegister

+ const WebAuthnRegisterDisplayName

+ const WebAuthnRegisterTrigger

+ const WebAuthnRemove

+ const WebAuthnScript

+ func PasswordLoginOrder(in []string) []string

+ func SortByGroups(orderByGroups []UiNodeGroup) func(*sortOptions)

+ func SortBySchema(schemaRef string) func(*sortOptions)

+ func SortUpdateOrder(f func([]string) []string) func(*sortOptions)

+ func SortUseOrder(keysInOrder []string) func(*sortOptions)

+ func SortUseOrderAppend(keysInOrder []string) func(*sortOptions)

+ func WithImageAttributes(f func(a *ImageAttributes)) func(a *ImageAttributes)

+ func WithInputAttributes(f func(a *InputAttributes)) func(a *InputAttributes)

+ func WithRequiredInputAttribute(a *InputAttributes)

+ func WithScriptAttributes(f func(a *ScriptAttributes)) func(a *ScriptAttributes)

+ type AnchorAttributes struct

+ HREF string

+ Identifier string

+ NodeType string

+ Title *text.Message

+ func (a *AnchorAttributes) GetNodeType() UiNodeType

+ func (a *AnchorAttributes) GetValue() interface{}

+ func (a *AnchorAttributes) ID() string

+ func (a *AnchorAttributes) Reset()

+ func (a *AnchorAttributes) SetValue(value interface{})

+ type Attributes interface

+ GetNodeType func() UiNodeType

+ GetValue func() interface{}

+ ID func() string

+ Reset func()

+ SetValue func(value interface{})

+ type ImageAttributes struct

+ Height int

+ Identifier string

+ NodeType string

+ Source string

+ Width int

+ func (a *ImageAttributes) GetNodeType() UiNodeType

+ func (a *ImageAttributes) GetValue() interface{}

+ func (a *ImageAttributes) ID() string

+ func (a *ImageAttributes) Reset()

+ func (a *ImageAttributes) SetValue(value interface{})

+ type ImageAttributesModifier func(attributes *ImageAttributes)

+ type ImageAttributesModifiers []ImageAttributesModifier

+ type InputAttributeType string

+ const InputAttributeTypeButton

+ const InputAttributeTypeCheckbox

+ const InputAttributeTypeDate

+ const InputAttributeTypeDateTimeLocal

+ const InputAttributeTypeEmail

+ const InputAttributeTypeHidden

+ const InputAttributeTypeNumber

+ const InputAttributeTypePassword

+ const InputAttributeTypeSubmit

+ const InputAttributeTypeText

+ const InputAttributeTypeURI

+ type InputAttributes struct

+ Disabled bool

+ FieldValue interface{}

+ Label *text.Message

+ Name string

+ NodeType string

+ OnClick string

+ Pattern string

+ Required bool

+ Type InputAttributeType

+ func (a *InputAttributes) GetNodeType() UiNodeType

+ func (a *InputAttributes) GetValue() interface{}

+ func (a *InputAttributes) ID() string

+ func (a *InputAttributes) Reset()

+ func (a *InputAttributes) SetValue(value interface{})

+ type InputAttributesModifier func(attributes *InputAttributes)

+ type InputAttributesModifiers []InputAttributesModifier

+ type Meta struct

+ Label *text.Message

+ type Node struct

+ Attributes Attributes

+ Group UiNodeGroup

+ Messages text.Messages

+ Meta *Meta

+ Type UiNodeType

+ func NewAnchorField(id string, href string, group UiNodeGroup, title *text.Message) *Node

+ func NewCSRFNode(token string) *Node

+ func NewImageField(id string, src string, group UiNodeGroup, opts ...ImageAttributesModifier) *Node

+ func NewInputField(name string, value interface{}, group UiNodeGroup, ...) *Node

+ func NewInputFieldFromJSON(name string, value interface{}, group UiNodeGroup, ...) *Node

+ func NewInputFieldFromSchema(name string, group UiNodeGroup, p jsonschemax.Path, ...) *Node

+ func NewScriptField(name string, src string, group UiNodeGroup, integrity string, ...) *Node

+ func NewTextField(id string, text *text.Message, group UiNodeGroup) *Node

+ func (n *Node) GetValue() interface{}

+ func (n *Node) ID() string

+ func (n *Node) MarshalJSON() ([]byte, error)

+ func (n *Node) Reset()

+ func (n *Node) UnmarshalJSON(data []byte) error

+ func (n *Node) WithMetaLabel(label *text.Message) *Node

+ type Nodes []*Node

+ func (n *Nodes) Append(node *Node)

+ func (n *Nodes) Remove(ids ...string)

+ func (n *Nodes) SetValueAttribute(id string, value interface{}) bool

+ func (n *Nodes) Upsert(node *Node)

+ func (n Nodes) Find(id string) *Node

+ func (n Nodes) Reset(exclude ...string)

+ func (n Nodes) ResetNodes(reset ...string)

+ func (n Nodes) ResetNodesWithPrefix(prefix string)

+ func (n Nodes) SortBySchema(ctx context.Context, opts ...SortOption) error

+ type ScriptAttributes struct

+ Async bool

+ CrossOrigin string

+ Identifier string

+ Integrity string

+ NodeType string

+ Nonce string

+ ReferrerPolicy string

+ Source string

+ Type string

+ func (a *ScriptAttributes) GetNodeType() UiNodeType

+ func (a *ScriptAttributes) GetValue() interface{}

+ func (a *ScriptAttributes) ID() string

+ func (a *ScriptAttributes) Reset()

+ func (a *ScriptAttributes) SetValue(value interface{})

+ type ScriptAttributesModifier func(attributes *ScriptAttributes)

+ type ScriptAttributesModifiers []ScriptAttributesModifier

+ type SortOption func(*sortOptions)

+ type TextAttributes struct

+ Identifier string

+ NodeType string

+ Text *text.Message

+ func (a *TextAttributes) GetNodeType() UiNodeType

+ func (a *TextAttributes) GetValue() interface{}

+ func (a *TextAttributes) ID() string

+ func (a *TextAttributes) Reset()

+ func (a *TextAttributes) SetValue(value interface{})

+ type UiNodeGroup string

+ const DefaultGroup

+ const LinkGroup

+ const LookupGroup

+ const OpenIDConnectGroup

+ const PasswordGroup

+ const ProfileGroup

+ const TOTPGroup

+ const WebAuthnGroup

+ func (g UiNodeGroup) String() string

+ type UiNodeType string

+ const Anchor

+ const Image

+ const Input

+ const Script

+ const Text

+ func (t UiNodeType) String() string

May 30, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Mar 25, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Mar 22, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Mar 21, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Mar 21, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Mar 21, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jan 21, 2022 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Dec 17, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Dec 14, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Dec 13, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Dec 12, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Dec 12, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Nov 9, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Oct 28, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Oct 28, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Oct 25, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Oct 25, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Oct 24, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Oct 27, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Sep 12, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Sep 11, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Sep 9, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Aug 28, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Aug 23, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jul 22, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jul 13, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jul 13, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Jul 13, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

May 17, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

May 14, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

May 11, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

May 7, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

May 5, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Apr 29, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Apr 29, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

Apr 29, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos

May 5, 2021 GO-2024-3160 +1 more

  GO-2024-3160: Ory Kratos's setting required_aal `highest_available` does not properly respect code + mfa credentials in github.com/ory/kratos

  GO-2026-4801: Ory Kratos has a SQL injection via forged pagination tokens in github.com/ory/kratos