Updated rest packages fix a security vulnerability

Weak random number generation in pkce implementation. CVE-2026-16615...

CVE-2026-94456

Postiz generates security-sensitive credentials using Math.random instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these credentials depend entirely on V8’s...

auth

PlaceOS 认证 环境变量 root@kitploit: If a sentry Data Source Name is configured SENTRYDSN=https://@.ingest.sentry.io/ A shared secret for encrypting cookies SECRETKEYBASE=84b04ea4259542f365 JWT Private key JWTSECRET=Base64 Encoded RSA PRIVATE KEY Database name and host RETHINKDBDB=placedevelopment...

OESA-2026-3974 rest security update

This library has been designed to make it easier to access web services that claim to be "RESTful". It comprises of two parts: the first aims to make it easier to make requests by providing a wrapper around libsoup, the second aids with XML parsing by wrapping libxml2. Security Fixes: A flaw was...

OESA-2026-3976 rest security update

This library has been designed to make it easier to access web services that claim to be "RESTful". It comprises of two parts: the first aims to make it easier to make requests by providing a wrapper around libsoup, the second aids with XML parsing by wrapping libxml2. Security Fixes: A flaw was...

OESA-2026-3975 rest security update

This library has been designed to make it easier to access web services that claim to be "RESTful". It comprises of two parts: the first aims to make it easier to make requests by providing a wrapper around libsoup, the second aids with XML parsing by wrapping libxml2. Security Fixes: A flaw was...

Linux Distros Unpatched Vulnerability : CVE-2026-48717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the...

CVE-2026-73309

CVE-2026-73309 XenForo 2.3.13 之前的版本在空字符串到达令牌端点时，可能会跳过 OAuth2 客户端密钥和 PKCE 验证。 发生了什么 该端点会检查 clientsecret 和 codeverifier 键是否存在，然后仅在其 PHP 字符串值为真值时才执行比较。因此，空值可以满足存在性检查，但会绕过比较。 对于公共 OAuth 客户端，攻击者仍然需要有效的授权码。该漏洞移除了 PKCE 中“仅有授权码是不够的”这一保证：授权码可以在没有验证器的情况下进行交换，从而生成具有用户批准范围的令牌。相同的假值模式也影响了机密客户端的检查。...

CVE-2026-3456-OAuth2-PKCE-Race-Condition-Account-Takeover-

8. CVE-2026-3456 – OAuth2 PKCE 竞态条件（账户接管） 概述 OAuth2 授权服务器中的竞态条件允许攻击者通过在短暂的时间窗口内猜测或暴力破解 PKCE codeverifier，在合法客户端兑换授权代码之前重放受害者的授权代码。 严重性： 高（账户接管） 模拟（Python HTTP 服务器） root@kitploit: !/usr/bin/env python3 """ vulnerableauthserver.py - Authorization server with race condition window. """ import time,...

CVE-2026-48717

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...

CVE-2026-48717 OpenAM OAuth Authorization Bypass via PKCE Challenge

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...

CVE-2026-48717

OpenAM Community Edition (through 16.0.6) contains an Improper Authorization flaw (CWE-285) in its OAuth2 authorization-code grant flow. The token endpoint only validates code_verifier when the realm-wide codeVerifierEnforced setting is enabled—a setting that ships disabled by default . When an a...

CVE-2026-48717 OpenAM OAuth Authorization Bypass via PKCE Challenge

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...

CVE-2026-48717 OpenAM OAuth Authorization Bypass via PKCE Challenge

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...

EUVD-2026-78369

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...

CVE-2026-90474

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

CVE-2026-90474

MCPHub before 1.0.32 is affected by an authentication bypass in its embedded OAuth 2.0 authorization server. The root cause is that client authentication is disabled by default and PKCE enforcement is optional , allowing an attacker who intercepts an authorization code to redeem it for an access ...

CVE-2026-90474 MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

CVE-2026-90474 MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

EUVD-2026-76850

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...