yiisoft/yii2-authclient Security Advisories - Packagist | Ecosyste.ms: Advisories

yiisoft/yii2-authclient

External authentication via OAuth and OpenID for the Yii framework

View on github.com · View on packagist.org

Security Advisories for yiisoft/yii2-authclient in packagist

Low

almost 2 years ago

yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation GSA_kwCzR0hTQS13OHZoLXA3NGoteDl4cM4AA34Q

packagist yiisoft/yii2-authclient

Moderate

almost 2 years ago

yiisoft/yii2-authclient's Oauth2 PKCE implementation is vulnerable GSA_kwCzR0hTQS1ydzU0LTY4MjYtYzhqNc4AA34O

packagist yiisoft/yii2-authclient

Filter by Severity

Moderate 1 Low 1