NewPass before 1.2.0 stores passwords (rather than password hashes) directly, which makes it easier to obtain unauthorized access to sensitive information. Rated low severity (CVSS 3.5), this vulnerability is low attack complexity. No vendor patch available.
Authentication Bypass
NVD
GitHub
CVSS 3.1
3.5
EPSS
0.2%