Pocket-Id
3 CVEs across 2 Pocket-Id products. Browse Pocket-Id vulnerabilities, severities, and proof-of-concept exploits.
Pocket-Id products with known CVEs
Pocket-Id CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-43983 | High | 8.1 | 2026-05-12 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.6.0, The createTokenFromRefreshToken function… |
CVE-2026-28513 | High | 8.5 | 2026-03-10 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an author… |
CVE-2026-28512 | High | 7.1 | 2026-03-10 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. From 2.0.0 to before 2.4.0, a flaw in callback URL valida… |