Skip to content

Pocket ID: OAuth redirect_uri validation bypass via userinfo/host confusion

High severity GitHub Reviewed Published Mar 7, 2026 in pocket-id/pocket-id • Updated Mar 10, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts