Advisories for package yiisoft/yii2-authclient

Listing reported advisories for package yiisoft/yii2-authclient sorted by their report date.

yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation
GitHub

yiisoft/yii2-authclient

<= 2.2.14

2023-12-18 20:01:00
yiisoft/yii2-authclient's Oauth2 PKCE implementation is vulnerable
GitHub

yiisoft/yii2-authclient

< 2.2.15

2023-12-18 19:34:25

Need help?

We are happy to help you with any questions you might have.

Documentation Roadmap Report a bug Get in touch