Skip to content

yiisoft/yii2-authclient vulnerabilities (Packagist)

2 vulnerabilities.

yiisoft/yii2-authclient Packagistyii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementationCVE-2023-50708Fix available6.1 MediumDecember 18, 2023
yiisoft/yii2-authclient PackagistThe Oauth2 PKCE implementation is vulnerableCVE-2023-50714Fix available6.8 MediumDecember 18, 2023