Punk-OAuth2 Security Advisories - Cpan | Ecosyste.ms: Advisories

Punk-OAuth2

OAuth2 and OpenID Connect for Punk applications

View on metacpan.org

Security Advisories for Punk-OAuth2 in cpan

Critical

9 days ago

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. CPANSA-Punk-OAuth2-2026-75866

cpan Punk-OAuth2

Moderate

11 days ago

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter. CPANSA-Punk-OAuth2-2026-75628

cpan Punk-OAuth2

Filter by Severity

Moderate 1 Critical 1