VDB
Sign up

package

npm/@hono/oauth-providers

pkg:npm/%40hono/oauth-providers

MEDIUM5.4npm
GHSA-fm3f-ch8h-qw8q· CVE-2026-81888

@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking

Modified: 9/15/2026