Oauth2-server Project vulnerabilities
We track 1 vulnerability in Oauth2-server Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 6, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Oauth2-server Project vulnerabilities
- 7.5 High severity
oauth2-server: Generation of Error Message Containing Sensitive Information
league/oauth2-server is an implementation of an OAuth 2.0 authorization server written in PHP. Starting in version 8.3.2 and prior to version 8.5.3, servers that passed their keys to the CryptKey constructor as as string instead of a file path will have had th