Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/09 5:42 p.m.17 views

Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters

Impact The Google, Apple, and Facebook authentication adapters use JWT verification to validate identity tokens. When the adapter's audience configuration option is not set clientId for Google/Apple, appIds for Facebook, JWT verification silently skips audience claim validation. This allows an...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder