All products

@node-oauth/oauth2-server

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
@node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codesCVE-2026-41213 · GHSA-JHM7-29PJ-4XVF @node-oauth/oauth2-server npm Medium Fix reported