@node-oauth/oauth2-server 安全漏洞

@node-oauth/oauth2-server is an open-source Node.js OAuth2 server implementation that adheres to RFC standards. @node-oauth/oauth2-server has a security vulnerability; this vulnerability stems from the token exchange path accepting an invalid codeverifier value according to RFC7636, which may lea...

EUVD-2017-5897

Malware in sbrugna...

EUVD-2023-2165

Malicious code in bioql PyPI...

CVE-2020-26877

ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...

PT-2022-8850

Name of the Vulnerable Software and Affected Versions ApiFest OAuth 2.0 Server version 0.3.1 Description The issue concerns the failure to validate the redirect URI according to RFC 6749, making the server susceptible to an open redirector attack. An attacker can manipulate the redirect uri...

CVE-2020-26877: URL Redirection to Untrusted Site

ApiFest OAuth 2.0 Server 0.3.1 does not validate the redirect URI in accordance with RFC 6749 and is susceptible to an open redirector attack. Specifically, it directly sends an authorization code to the redirect URI submitted with the authorization request, without checking whether the redirect...