Oauth2-Server Project Oauth2-Server
2 CVEs affecting Oauth2-Server Project Oauth2-Server. Latest disclosed: 2022-08-29. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-18924 | High | 7.5 | 2020-10-04 | oauth2-server (aka node-oauth2-server) through 3.1.1 implements OAuth 2.0 without PKCE. It does not prevent authorization code injection. This is similar to CV… |
CVE-2020-26938 | High | 7.2 | 2022-08-29 | In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked… |