Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
- https://herolab.usd.de/security-advisories/usd-2020-0053/
No PoCs found on GitHub currently.