MEDIUM6.8Packagist
GHSA-rw54-6826-c8j5· CVE-2023-50714yiisoft/yii2-authclient's Oauth2 PKCE implementation is vulnerable
Modified: 9/10/2026
package
Packagist/yiisoft/yii2-authclient
pkg:packagist/yiisoft/yii2-authclient
—0.0Packagist
GHSA-w8vh-p74j-x9xp· CVE-2023-50708yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation
Modified: 9/10/2026