PT-2026-105863

Summary A timing side-channel vulnerability exists in the PKCE RFC 7636 implementation of the Authorization Code Grant flow. The code challenge method plain function uses Python's standard == operator for string comparison instead of a constant-time comparison function, potentially allowing...