What’s Vulnerable › Products

yiisoft yii2-authclient vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your yiisoft yii2-authclient version is affected

Latest yiisoft yii2-authclient vulnerabilities

• CVE-2023-50714 — The Oauth2 PKCE implementation is vulnerable (CVSS 8.8)
• CVE-2023-50708 — yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation (CVSS 9.8)