VYPR

oauth

by FriendsOfFlarum

Source repositories

CVEs (1)

  • CVE-2026-92161CriSep 25, 2026
    risk 0.57cvss 9.8epss 0.00

    FriendsOfFlarum OAuth allows users to log in to Flarum with GitHub, Twitter, Facebook, and other providers. Prior to 1.7.4 and 2.0.0-beta.4, the Discord OAuth provider does not check the verified field returned for an OAuth email before passing the address to Flarum core as…