Plack::Middleware::OAuth vulnerabilities

1 known vulnerability in Plack::Middleware::OAuth from CORNELIUS. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Plack::Middleware::OAuth: Cross-Site Request Forgery

  CVE-2026-12740Jul 4, 2026CORNELIUS

  Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authorization redirect without issuing a state value, and AccessTokenV2 exchanges the callback code and registers the resul