Known Vulnerabilities for Oauth by FriendsOfFlarum
Listed below are 10 of the newest known vulnerabilities associated with "Oauth" by "FriendsOfFlarum".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-96259 json | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to apply the internal-conn... | Not Provided | 2026-09-22 | 2026-09-23 |
| CVE-2026-94456 json | Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The same ... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-94127 json | When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead ... | Not Provided | 2026-09-22 | 2026-09-23 |
| CVE-2026-93960 json | A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file app/Http/Control... | Not Provided | 2026-09-20 | 2026-09-22 |
| CVE-2026-93354 json | Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to reg... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-92527 json | A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbacks_controller.rb... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92161 json | FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other providers. Prior to 1.7.4 an... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-92138 json | The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` ... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-91972 json | Vikunja versions before 2.6.0 fail to apply rate limiting to /api/v2 public authentication endpoints including login, registe... | Not Provided | 2026-09-15 | 2026-09-17 |
| CVE-2026-91201 json | DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint witho... | Not Provided | 2026-09-14 | 2026-09-18 |