https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:12:10 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-105119 <p>OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is exactly code, so codes issued through OpenID Connect hybrid flows (code token, code id_token, code token id_token) carry no bound challenge. An attacker who intercepts such a code can redeem it for a public client&#39;s tokens with any non-empty code_verifier.</p> <p>OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is exactly code, so codes issued through OpenID Connect hybrid flows (code token, code id_token, code token id_token) carry no bound challenge. An attacker who intercepts such a code can redeem it for a public client&#39;s tokens with any non-empty code_verifier.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-105119 https://vulnerability.circl.lu/vuln/ghsa-mf8f-w84m-x4gc <p>OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is exactly code, so codes issued through OpenID Connect hybrid flows (code token, code id_token, code token id_token) carry no bound challenge. An attacker who intercepts such a code can redeem it for a public client&#39;s tokens with any non-empty code_verifier.</p> <p>OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is exactly code, so codes issued through OpenID Connect hybrid flows (code token, code id_token, code token id_token) carry no bound challenge. An attacker who intercepts such a code can redeem it for a public client&#39;s tokens with any non-empty code_verifier.</p> https://vulnerability.circl.lu/vuln/ghsa-mf8f-w84m-x4gc