Filament (>= 5.0.0, < 5.7.0)

An improper authentication vulnerability in the Filament framework allows attackers to bypass app-based multi-factor authentication when recovery codes are enabled.