Skip to content
OpenAdvisories

Package · npm

react-oauth-flow

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-65m9-m259-7jqw

    Improper Authorization in react-oauth-flow

    All versions of `react-oauth-flow` fail to properly implement the OAuth protocol. The package stores secrets in the front-end code. Instead of using a public OAuth client, it uses a confidential client on the browser. This may allow attackers to compromise se…

    react-oauth-flow npm