CVE-2026-117656

The pow-auth Assent authentication library is vulnerable to an authentication bypass (CWE-290, CWE-349) in its Sign in with Apple strategy, affecting versions 0.1.25 before 0.3.2 . The root cause is the unsafe merging of untrusted data from the user form parameter (provided by the browser during ...