Threats affecting pkg:github/altumcode/66biolinks

CVE-2025-69602 is a critical session fixation vulnerability in 66biolinks v62.0.0 by AltumCode. The application fails to regenerate session identifiers after user authentication, allowing attackers to hijack authenticated sessions by setting or predicting session IDs. This vulnerability has a CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring user interaction or privileges. Exploitation can lead to unauthorized access to user accounts and sensitive data. No known exploits are currently reported in the wild. European organizations using 66biolinks are at risk, especially those in countries with significant adoption of this software. Mitigation requires immediate patching or implementing session regeneration upon login to prevent session fixation attacks.