Open Redirect

oidc-middleware is vulnerable to open redirect. The vulnerability exists because the ensureAuthenticated function of oidcUtil.js does not properly validate the request URLs, allowing an attacker to redirect the user to malicious URLs...