Socialite vulnerabilities

1 known vulnerability in Socialite from Laravel. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Socialite: Authentication Bypass by Capture-replay

  CVE-2026-73683Aug 14, 2026Laravel

  Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the missing nonce claim validation in the getUserByOIDCToken() function within FacebookP