Known Vulnerabilities for Oauth2-server by Thephpleague
Listed below are 1 of the newest known vulnerabilities associated with "Oauth2-server" by "Thephpleague".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126136 json | For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to th... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124466 json | OpenEMR before 8.4.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the s... | Not Provided | 2026-11-08 | 2026-11-09 |
| CVE-2026-114620 json | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticati... | Not Provided | 2026-10-22 | 2026-10-30 |
| CVE-2026-108865 json | AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain v... | Not Provided | 2026-10-11 | 2026-10-14 |
| CVE-2026-103957 json | Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote... | Not Provided | 2026-10-02 | 2026-10-06 |
| CVE-2026-103649 json | Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to ... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-101057 json | utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a call tem... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-89111 json | The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who c... | Not Provided | 2026-10-13 | 2026-11-03 |
| CVE-2026-85317 json | Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache Camel:... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-81029 json | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServl... | Not Provided | 2026-08-26 | 2026-10-20 |