node-oauth
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| node-oauth2-server | 1 | – | Apr 23, 2026 |
Exploited and recent CVEs
- CVE-2026-41213 @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes 0.3%