oauth2-server vulnerabilities

1 known vulnerability in oauth2-server from Thephpleague. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  oauth2-server: Generation of Error Message Containing Sensitive Information

  CVE-2023-37260Jul 6, 2023Thephpleague

  league/oauth2-server is an implementation of an OAuth 2.0 authorization server written in PHP. Starting in version 8.3.2 and prior to version 8.5.3, servers that passed their keys to the CryptKey constructor as as string instead of a file path will have had th