FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider
Critical severity
GitHub Reviewed
Published
Aug 10, 2026
in
FriendsOfFlarum/oauth
•
Updated Sep 25, 2026
Give feedback on Dependabot alerts