OS
Vendor
Oauth2 Server Project
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-31691 | OS Oauth2 Server Oauth2 Server Project | 9.8 | Mar 31 | OAuth2 Server - Moderately critical - Access bypass - SA-CONTRIB-2025-020 |
| CVE-2023-37260 | OA Oauth2-server Oauth2-server Project | 7.5 | Jul 6 | league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase |
| CVE-2020-26938 | OA Oauth2-server Oauth2-server Project | 7.2 | Aug 29 | In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked against an… |
| CVE-2017-18924 | OA Oauth2-server Oauth2-server Project | 7.5 | Oct 4 | oauth2-server (aka node-oauth2-server) through 3.1.1 implements OAuth 2.0 without PKCE |