Threats affecting pkg:github/cyrus-sasl

Cyrus SASL versions up to 2.1.28 contain an authentication bypass vulnerability in the SRP server mechanism. The flaw allows unauthenticated network clients to bypass authentication by sending a crafted client public value, enabling them to authenticate as any user without a password and obtain session keys. This vulnerability has a critical severity rating with a CVSS score of 9.3.