IN
Product
IndieAuth
by indieweb · last CVE Oct 24, 2025
1
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add IndieAuth to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-12028
8.8
0%
Oct 24
IndieAuth <= 4.5.4 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens
Affected: through 4.5.4
Showing 1