Cloudflare Workers-Oauth-Provider
2 CVEs affecting Cloudflare Workers-Oauth-Provider. Latest disclosed: 2025-05-01. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-4144 | Critical | 9.8 | 2025-05-01 | PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp . However… |
CVE-2025-4143 | Medium | 6.1 | 2025-05-01 | The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that r… |