Google Oauth Client Library For Java
2 CVEs affecting Google Oauth Client Library For Java. Latest disclosed: 2022-05-03. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22573 | High | 8.7 | 2022-05-03 | The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from v… |
CVE-2020-7692 | High | 7.4 | 2020-07-09 | PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an author… |