Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-55834
  • github.com/pocket-id/pocket-id
 Pocket ID: Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none 28 Aug
  • Fix available
  • Severity - 4.3 (Medium)
CVE-2026-43983
  • github.com/pocket-id/pocket-id
 Pocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions 12 May
  • Fix available
  • Severity - 8.5 (High)
CVE-2026-28513
  • github.com/pocket-id/pocket-id
 Pocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange 09 Mar
  • Fix available
  • Severity - 8.5 (High)
CVE-2026-28512
  • github.com/pocket-id/pocket-id
 Pocket ID: OAuth redirect_uri validation bypass via userinfo/host confusion 09 Mar
  • Fix available
  • Severity - 7.1 (High)