Skip to content
OpenAdvisories

Package · npm

@fastify/oauth2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    CVE-2023-31999

    @fastify/oauth2 vulnerable to Cross Site Request Forgery due to reused Oauth2 state

    All versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all requests for all users. The purpose of the Oauth2 state parameter is to prevent Cross-Site-Request-Forgery attacks. As such, it should be uniq…

    npm @fastify/oauth2 @fastify/oauth2 npm