Skip to content
OpenAdvisories

Vendor

pocket-id

6 known vulnerabilities.

Products

pocket-id 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-55834

    Pocket ID: Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none

    Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes/authorize/+page.ts reads the redirect_uri query parameter and frontend/src/routes/authorize/+page.svelte uses the raw …

    pocket-id pocket-id github.com/pocket-id/pocket-id/backend Go