Known Vulnerabilities for Oauth2-server by Oauth2-server Project
Listed below are 2 of the newest known vulnerabilities associated with "Oauth2-server" by "Oauth2-server Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65594 json | n8n before 2.29.8 and 2.30.x before 2.30.1 (affected from 2.27.0, when the OAuth 2.1 consent and token-issuance flow was intr... | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-59822 json | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamab... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-55659 json | Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, several server-rendered Grist pages embe... | Not Provided | 2026-07-10 | 2026-07-13 |
| CVE-2026-50629 json | The 'clientId' parameter from incoming HTTP requests is directly concatenated into OAuth2 server log warning messages without... | Not Provided | 2026-06-12 | 2026-06-12 |
| CVE-2026-48146 json | Budibase is an open-source low-code platform. Prior to 3.39.0, the OAuth2 token fetch function in packages/server/src/sdk/wor... | Not Provided | 2026-05-27 | 2026-05-28 |
| CVE-2026-45689 json | Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0, 8.4.1, 8.3.3, 8.2.3, 8.1.4... | Not Provided | 2026-06-24 | 2026-06-26 |
| CVE-2026-43875 json | WWBN AVideo is an open source video platform. In versions up to and including 29.0, plugin/MobileManager/oauth2.php completes... | Not Provided | 2026-05-11 | 2026-05-12 |
| CVE-2026-42604 json | Actual is a local-first personal finance tool. The `POST /openid/config` endpoint in Actual Budget's sync-server versions <= ... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-41213 json | @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-i... | Not Provided | 2026-04-23 | 2026-04-25 |
| CVE-2026-41070 json | openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) a... | Not Provided | 2026-05-08 | 2026-05-08 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oauth2-server Project | Oauth2-server | 3.1.1 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.1.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.1.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.1.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.0.2 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.0.1 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.0.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.0.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.0.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.0.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.0.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 3.0.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 2.4.1 | |||
| Application | Oauth2-server Project | Oauth2-server | 2.4.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 2.3.0 | |||
| Application | Oauth2-server Project | Oauth2-server | 2.2.2 | |||
| Application | Oauth2-server Project | Oauth2-server | - |