Pocket-Id

4 CVEs across 2 Pocket-Id products. Browse Pocket-Id vulnerabilities, severities, and proof-of-concept exploits.

Pocket-Id products with known CVEs

ProductCVEs
Pocket-Id4
Pocket Id3
Pocket-Id CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-55834Medium4.32026-08-28Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts…
CVE-2026-43983High8.12026-05-12Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.6.0, The createTokenFromRefreshToken function…
CVE-2026-28513High8.52026-03-10Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an author…
CVE-2026-28512High7.12026-03-10Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. From 2.0.0 to before 2.4.0, a flaw in callback URL valida…