Skip to content
OpenAdvisories

Vendor

CORNELIUS

1 known vulnerabilities.

Products

Plack::Middleware::OAuth 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-12740

    Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter

    Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. RequestTokenV2 builds the provider authorization redirect without issuing a state value, and AccessTokenV2 exchanges the callback code and registers the resu…

    CORNELIUS Plack::Middleware::OAuth