Dancer2::Plugin::Auth::OAuth::Provider vulnerabilities

1 known vulnerability in Dancer2::Plugin::Auth::OAuth::Provider from BIAFRA. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Dancer2::Plugin::Auth::OAuth::Provider: Cross-Site Request Forgery

  CVE-2026-12746Jul 4, 2026BIAFRA

  Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization redirect without issuing a state value, and the callback method exchanges the cal