What’s Vulnerable › Products
node-oauth2-server vulnerabilities
1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Check whether your node-oauth2-server version is affected
Latest node-oauth2-server vulnerabilities
- CVE-2026-41213 — @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes (CVSS 5.9)