node-oauth node-oauth2-server

• CVE-2026-41213 Medium 5.9 @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes 0.3%