PT-2026-94293

Name of the Vulnerable Software and Affected Versions ash authentication versions 0.6.0 through 4.14.9 ash authentication versions 5.0.0-rc.0 through 5.0.0-rc.13 Description Insufficient session expiration allows an attacker who obtains a victim's OAuth2 state value to replay the callback and sig...