7892 matches found
CVE-2026-73683
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
CVE-2026-73683
CVE-2026-73683 affects Laravel Socialite’s Facebook provider. The flaw allows unauthenticated attackers to replay captured OIDC id_tokens via a missing nonce validation in FacebookProvider.php’s getUserByOIDCToken(), so a valid, unexpired id_token for the same Facebook App ID can be submitted to ...
CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
WordPress Amelia plugin < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR vulnerability
Provider+ Cross-Customer Appointment Data Disclosure via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Amelia versions 2.4.6...
GO-2025-3847 vulnerabilities
Vulnerabilities for packages: terraform-provider-acme, sftpgo, traefik, terraform-provider-acme-fips, traefik-fips...
GO-2023-1793 vulnerabilities
Vulnerabilities for packages: vault-csi-provider, secrets-store-csi-driver...
GO-2026-5973 vulnerabilities
Vulnerabilities for packages: rke2-cloud-provider, rke2-cloud-provider-fips...
GO-2022-1144 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, kubeflow, terraform-provider-sendgrid-fips, terraform-provider-sendgrid, kubeflow-katib...
GO-2022-0236 vulnerabilities
Vulnerabilities for packages: grpcurl, terraform-provider-sendgrid-fips, k3d, hey, terraform-provider-sendgrid...
GO-2021-0238 vulnerabilities
Vulnerabilities for packages: grpcurl, terraform-provider-sendgrid-fips, k3d, hey, terraform-provider-sendgrid...
GO-2023-1571 vulnerabilities
Vulnerabilities for packages: go, kubeflow-fips, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, grpcurl, restic, wireguard-go, kube-state-metrics, kubeflow, terraform-provider-sendgrid-fips, gke-gcloud-auth-plugin, k3d, hey, terraform-provider-sendgrid, kubeflow-katib...
GO-2022-0969 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, grpcurl, wireguard-go, kube-state-metrics, kubeflow, terraform-provider-sendgrid-fips, k3d, hey, terraform-provider-sendgrid, kubeflow-katib...
GO-2021-0356 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid-fips, k3d, terraform-provider-sendgrid...
GO-2021-0113 vulnerabilities
Vulnerabilities for packages: gitleaks, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, vt-cli, terraform-provider-sendgrid-fips, k3d, hey, terraform-provider-sendgrid...
GO-2022-1059 vulnerabilities
Vulnerabilities for packages: gitleaks, kubeflow-fips, dynamic-localpv-provisioner-fips, php-fpmexporter, dynamic-localpv-provisioner, grpcurl, vt-cli, kube-state-metrics, kubeflow, terraform-provider-sendgrid-fips, k3d, hey, terraform-provider-sendgrid...
GO-2022-0968 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow, terraform-provider-sendgrid-fips, k3d, terraform-provider-sendgrid...
GO-2022-0493 vulnerabilities
Vulnerabilities for packages: kind, dynamic-localpv-provisioner-fips, ctop, dynamic-localpv-provisioner, grpcurl, kubeflow, terraform-provider-sendgrid-fips, k3d, terraform-provider-sendgrid...
GO-2025-3787 vulnerabilities
Vulnerabilities for packages: filebrowser, glow, kyverno-notation-aws, jitsucom-bulker, chart-testing-fips, boring-registry-fips, witness, timestamp-authority, grafana-alloy, spire-server, cluster-api, kube-bench, opentofu-fips, falcoctl-fips, grype, syft, terraform-mcp-server, grype-db,...
GO-2026-4986 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-directconnect-fips, crossplane-provider-aws-redshiftserverless, etcd-fips, gotrue, crossplane-provider-aws-efs-fips, scorecard, kube-metrics-adapter-fips, cilium-envoy-fips, zabbix-agent2, crossplane-provider-aws-vpc-fips, hubble,...
