Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
@hono/oauth-providers
@hono/oauth-providers vulnerabilities (npm)
1 vulnerability.
@hono/oauth-providers
npm
@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking
CVE-2026-81888
Fix available
5.4
Medium
August 31, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open