Skip to content
OpenAdvisories

Package · PyPI

emailproxy

1 known vulnerabilities.

1 result · Feed

  • High 8.1

    Expired tokens can be renewed without validating the account password

    ### Impact In versions of the proxy from `2022-09-05` onwards (since 8c874c2ff3d503ac20c7d32f46e08547fcb9e23f), expired OAuth 2.0 client credentials grant (CCG) flow authorisation tokens could be renewed automatically without checking their validity against t…