What’s Vulnerable › Products

indieweb IndieAuth vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your indieweb IndieAuth version is affected

Latest indieweb IndieAuth vulnerabilities

• CVE-2025-12028 — IndieAuth <= 4.5.4 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens (CVSS 8.8)