@cloudflare/workers-oauth-provider vulnerabilities (npm)

2 vulnerabilities.

• @cloudflare/workers-oauth-provider npm PKCE bypass via downgrade attack CVE-2025-4144 Fix available 5.3 MediumMay 1, 2025
• @cloudflare/workers-oauth-provider npm Missing validation of redirect_uri on authorize endpoint CVE-2025-4143 Fix available 6.0 MediumMay 1, 2025