19 matches found
CVE-2026-81036: URL Redirection to Untrusted Site
Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crates/http/src/auth/oauth/registration.rs returns success immediately when the client-authentication requirement is disabled, and that...
CVE-2026-67332: Improper Authorization
@better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources. Attackers can complete an OAuth flow and obtain access tokens whose audience targets resource servers the authorization never...
CVE-2026-53517
Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on the refreshtoken grant performs a non-atomic read, validate, revoke, and mint sequence on the oauthRefreshToken row, allowing...
CVE-2026-53517: Concurrent Execution using Shared Resource with Improper Synchronization
Better Auth is an authentication and authorization library for TypeScript. From 1.4.8-beta.7 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint on the refreshtoken grant performs a non-atomic read, validate, revoke, and mint sequence on the oauthRefreshToken row, allowing...
CVE-2026-53518: Concurrent Execution using Shared Resource with Improper Synchronization
Better Auth is an authentication and authorization library for TypeScript. From 1.6.0 until 1.6.11, the @better-auth/oauth-provider POST /oauth2/token endpoint for the authorizationcode grant redeems a single-use authorization code through a non-atomic find-then-delete sequence, allowing two...
Insufficient Session Expiration
Overview @better-auth/oauth-provider is an An oauth provider plugin for Better Auth Affected versions of this package are vulnerable to Insufficient Session Expiration through the POST /oauth2/token endpoint during the refresh token granting. An attacker can gain unauthorized access by exploiting...
@anchrd/gate (>=0.28.0, <=0.40.0), @anchrd/gate-api (>=0.1.1, <=0.26.0) +8 more potentially affected by unknown CVE via @better-auth/oauth-provider (>=1.6.11, <=1.6.25)
@better-auth/oauth-provider NPM version =1.6.11, =0.28.0, =0.1.1, =0.0.1-alpha.0, =1.0.0, =0.146.0, =0.141.1, =0.136.1, =0.135.12, =0.222.0, =0.213.0, =0.225.0 Source cves: unknown CVE Source advisory: SNYK:JS-BETTERAUTHOAUTHPROVIDER-17905642...
@anchrd/gate (>=0.28.0, <=0.40.0), @anchrd/gate-api (>=0.1.1, <=0.26.0) +8 more potentially affected by CVE-2026-67332 via @better-auth/oauth-provider (>=1.6.11, <=1.6.25)
@better-auth/oauth-provider NPM version =1.6.11, =0.28.0, =0.1.1, =0.0.1-alpha.0, =1.0.0, =0.146.0, =0.141.1, =0.136.1, =0.135.12, =0.222.0, =0.213.0, =0.225.0 Source cves: CVE-2026-67332 Source advisory: OSV:GHSA-P2FR-6HMX-4528...
PT-2026-60915
Am I affected? Users are affected if all of the following hold: - Their application depends on @better-auth/oauth-provider on any stable 1.6.x release the stable line is not patched or on a pre-release before 1.7.0-beta.4. - Their application either configures validAudiences with more than one...
CVE-2026-12746: Cross-Site Request Forgery (CSRF)
Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authenticationurl method builds the provider authorization redirect without issuing a state value, and the callback method exchanges the callback code and registers the resulting...
CVE-2026-11832 Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable...
CVE-2026-11832: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce. The default nonce was generated using an MD5 hash of the epoch time, which is predictable...
PT-2026-35333
Am I affected? You're affected if all of the following are true: - Using @better-auth/oauth-provider at version specified below - You configured clientPrivileges in the plugin options expecting it to gate who can create OAuth clients - The /oauth2/create-client or /admin/oauth2/create-client...
CVE-2026-3432: Missing Authorization
On SimStudio version below to 0.5.74, the /api/auth/oauth/token endpoint contains a code path that bypasses all authorization checks when provided with credentialAccountUserId and providerId parameters. An unauthenticated attacker can retrieve OAuth access tokens for any user by supplying their...
Malicious code in prompts-auth-oauth-markdown-pdf (npm)
The package prompts-auth-oauth-markdown-pdf was found to contain malicious code...
DEBIAN-CVE-2024-12368
Improper access control in the authoauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users...
PT-2025-7903
Name of the Vulnerable Software and Affected Versions Odoo Community version 15.0 Odoo Enterprise version 15.0 Description The issue is related to improper access control in the auth oauth module, allowing an internal user to export the OAuth tokens of other users. Recommendations For Odoo...