datasette-indieauth
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Implementation trusts the "me" field returned by the authorization server without verifying it | datasette-indieauth | PyPI | Critical | Fix reported |