yiisoft/yii2-authclient
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| yiisoft/yii2-authclient's Oauth2 PKCE implementation is vulnerable | yiisoft/yii2-authclient | Composer | Medium | Fix reported | |
| yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation | yiisoft/yii2-authclient | Composer | Low | Fix reported |