- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2
- Registry
- npm
Advisories 2
- CVE-2020-26938Unrated
In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and…
Affected: through 3.1.1.
- CVE-2017-18924Unrated
oauth2-server (aka node-oauth2-server) through 3.1.1 implements OAuth 2.0 without PKCE.
Affected: through 3.1.1.