fof/oauth vulnerabilities (Packagist)

1 vulnerability.

• fof/oauth Packagist FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider CVE-2026-92161 Fix available 9.8 CriticalSeptember 25, 2026