Authentication Bypass

github.com/coreos/dex is vulnerable to authentication bypass. The application does not properly check if all assertion elements in a response are valid, allowing a malicious user to insert their own assertion and bypass authentication...