yiisoft yii2-authclient

• CVE-2023-50714 Medium 6.8 The Oauth2 PKCE implementation is vulnerable 0.5%
• CVE-2023-50708 Medium 6.1 yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation 0.7%