CVE-2021-22236

Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present in GitLab CE/EE since version 14.1...

CVE-2022-31162

Slack Morphism is an async client library for Rust. Prior to 0.41.0, it was possible for Slack OAuth client information to leak in application debug logs. Stricter and more secure debug formatting was introduced in v0.41.0 for OAuth secret types to reduce the possibility of printing sensitive...

EUVD-2025-203508

Malicious code in sds-oauth-client npm...

Malicious Package

Overview sds-oauth-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in sds-oauth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11edc1113892a2a7000ea8835ce5819da044898e6a4c24a8ce57f8c00d5f351 The package sds-oauth-client was found to contain malicious code. Source: ghsa-malware f7e9cce8e795bc77f5fa0dff91fc1a61fb00b989ced3e091d402dca108bf21...

MAL-2025-192581 Malicious code in sds-oauth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11edc1113892a2a7000ea8835ce5819da044898e6a4c24a8ce57f8c00d5f351 The package sds-oauth-client was found to contain malicious code. Source: ghsa-malware f7e9cce8e795bc77f5fa0dff91fc1a61fb00b989ced3e091d402dca108bf21...

CVE-2025-62800 FastMCP vulnerable to reflected XSS in client's callback page

FastMCP is the standard framework for building MCP applications. Versions prior to 2.13.0 have a reflected cross-site scripting vulnerability in the OAuth client callback page oauthcallback.py where unescaped user-controlled values are inserted into the generated HTML, allowing arbitrary JavaScri...

OESA-2025-2432 google-oauth-java-client security update

Written by Google, the Google OAuth Client Library for Java is a powerful and easy-to-use Java library for the OAuth 1.0a and OAuth 2.0 authorization standards. The Google OAuth Client Library for Java is designed to work with any OAuth service on the web, not just with Google APIs. It is built o...

Mattermost has an Observable Timing Discrepancy vulnerability

Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...

CVE-2025-54499

Mattermost versions 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to use constant-time comparison for sensitive string comparisons which allows attackers to exploit timing oracles to perform byte-by-byte brute force attacks via response time analysis on Cloud API keys and OAuth client secrets...

EUVD-2016-1693

Malware in sbrugna...

EUVD-2021-26237

Malware in sbrugna...

EUVD-2020-0426

Malware in sbrugna...

CVE-2025-9485 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()

The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...

CVE-2025-9485

CVE-2025-9485 is an authentication-bypass flaw in the WordPress plugin “OAuth Single Sign On – SSO (OAuth Client)” up to v6.26.12. The root cause is improper verification of cryptographic signatures due to unsafe JWT handling in get_resource_owner_from_id_token, enabling unauthenticated attackers...

EUVD-2023-1780

Malicious code in bioql PyPI...

EUVD-2025-27268

Malicious code in bioql PyPI...

EUVD-2022-42991

Malicious code in bioql PyPI...

EUVD-2022-42992

Malicious code in bioql PyPI...

EUVD-2022-34373

Malicious code in bioql PyPI...