Pocket-id Pocket_id
3 CVEs affecting Pocket-id Pocket_id. Latest disclosed: 2026-05-12. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-28513 | High | 8.5 | 2026-03-10 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an author… |
CVE-2026-43983 | High | 8.1 | 2026-05-12 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.6.0, The createTokenFromRefreshToken function… |
CVE-2026-28512 | High | 7.1 | 2026-03-10 | Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. From 2.0.0 to before 2.4.0, a flaw in callback URL valida… |