Skip to content
OpenAdvisories

Vendor

BIAFRA

2 known vulnerabilities.

Products

Dancer2::Plugin::Auth::OAuth 1 Dancer2::Plugin::Auth::OAuth::Provider 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-12746

    Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter

    Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization redirect without issuing a state value, and the callback method exchanges the ca…

    BIAFRA Dancer2::Plugin::Auth::OAuth::Provider