declarative-policy

DeclarativePolicy: مكتبة تفويض تعريفية توفر هذه المكتبة لغة مجال خاصة DSL لكتابة سياسات التفويض. يمكن استخدامها لفصل المنطق عن الأذونات، وقد تم استخدامها على نطاق واسع في الإنتاج في GitLab.com. المؤلف الأصلي لهذه المكتبة هو Jeanine Adkisson، وحقوق النشر محفوظة لـ GitLab. التثبيت أضف هذا السطر إلى...

UBUNTU-CVE-2026-54789

modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...

@abip/scp-common (1.0.1-alpha.0), @akemona-org/strapi-admin (>=3.7.0, <=3.19.3) +401 more potentially affected by CVE-2026-1774 via @casl/ability (>=2.4.2, <=6.7.3)

@casl/ability NPM version =2.4.2, =3.7.0, =0.2.0, =0.3.1, =4.25.19-patch.1, =0.0.1, =0.0.1, =0.1.0, =1.7.0, =0.7.1, =0.13.85 and more Source cves: CVE-2026-1774 Source advisory: OSV:GHSA-X9VF-53Q3-CVX6...

CVE-2025-53535

Better Auth is an authentication and authorization library for TypeScript. An open redirect has been found in the originCheck middleware function, which affects the following routes: /verify-email, /reset-password/:token, /delete-user/callback, /magic-link/verify, /oauth-proxy-callback. This...

CVE-2025-53535

Better Auth Open Redirect (CVE-2025-53535) involves the TypeScript authentication/authorization library where the originCheck middleware incorrectly validates URLs, enabling an open redirect on routes including /verify-email, /reset-password/:token, /delete-user/callback, /magic-link/verify, and ...

SUSE CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of urivalidate functions depending where it is used. OAuthLib...