CVE-2026-19078

CVE-2026-19078 affects the oauth-server component. The open redirect occurs when the then parameter in the grant-approval handler is not properly validated, allowing an authenticated user to be redirected to an attacker-controlled site. Impact could enable phishing to steal sensitive information....