https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 09:40:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-46276 EUVD-2026-46276 https://cve.radiocsirt.org/vuln/euvd-2026-46276 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26938 <p>In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked against an incorrect URI pattern (&#34;[a-zA-Z][a-zA-Z0-9+.-]+:&#34;) before making a redirection. This allows a malicious client to pass an XSS payload through the redirect_uri parameter while making an authorization request. NOTE: this vulnerability is similar to CVE-2020-7741.</p> <p>In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the redirect_uri parameter received during the authorization and token request is checked against an incorrect URI pattern (&#34;[a-zA-Z][a-zA-Z0-9+.-]+:&#34;) before making a redirection. This allows a malicious client to pass an XSS payload through the redirect_uri parameter while making an authorization request. NOTE: this vulnerability is similar to CVE-2020-7741.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26938 https://cve.radiocsirt.org/vuln/ghsa-4rg6-fm25-gc34 <p><strong>Affected:</strong> npm: oauth2-server</p> <p>In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the `redirect_uri` parameter received during the authorization and token request is checked against an incorrect URI pattern (`[a-zA-Z][a-zA-Z0-9+.-]+:`) before making a redirection. This allows a malicious client to pass an XSS payload through the redirect_uri parameter while making an authorization request. NOTE: this vulnerability is similar to CVE-2020-7741.</p> <p><strong>Affected:</strong> npm: oauth2-server</p> <p>In oauth2-server (aka node-oauth2-server) through 3.1.1, the value of the `redirect_uri` parameter received during the authorization and token request is checked against an incorrect URI pattern (`[a-zA-Z][a-zA-Z0-9+.-]+:`) before making a redirection. This allows a malicious client to pass an XSS payload through the redirect_uri parameter while making an authorization request. NOTE: this vulnerability is similar to CVE-2020-7741.</p> https://cve.radiocsirt.org/vuln/ghsa-4rg6-fm25-gc34 https://cve.radiocsirt.org/vuln/gsd-2020-26938 gsd-2020-26938 https://cve.radiocsirt.org/vuln/gsd-2020-26938