MEDIUM5.9npm
GHSA-jhm7-29pj-4xvf· CVE-2026-41213@node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes
Modified: 5/5/2026
package
npm/@node-oauth/oauth2-server
pkg:npm/%40node-oauth/oauth2-server