Oauth2 vulnerabilities

1 known vulnerability in Oauth2 from Fastify. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  @fastify/oauth2: Cross-Site Request Forgery

  CVE-2023-31999Jul 4, 2023Npm

  All versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all requests for all users. The purpose of the Oauth2 state parameter is to prevent Cross-Site-Request-Forgery attacks. As such, it should be uniqu