VYPR

Dancer2::Plugin::Auth::OAuth::Provider

by Perl Foundation

CVEs (1)

  • CVE-2026-12746Jul 4, 2026
    risk 0.00cvss epss 0.00

    Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. The authentication_url method builds the provider authorization redirect without issuing a state value, and the callback method exchanges the callback code and…