- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 1 · 1 critical
- Registry
- Hex
Advisories 1
- CVE-2026-117656Critical 9.3
Unverified Sign in with Apple callback parameter can override verified ID token claims
Affected: from 0.1.25, fixed in 0.3.2; from 0.1.25, fixed in 0.3.2.