Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
mitre·CWE-613·Published 2020-10-28