Improper Verification of Source of a Communication Channel

Overview @auth/core is an Authentication for the Web. Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper binding of OAuth check cookies to the provider that created them. An attacker can gain unauthorized access to a victim'...