Cloudflare Workers-oauth-provider vulnerabilities

• cloudflare workers-oauth-provider PKCE bypass via downgrade attack CVE-2025-4144 Fix available 5.3 MediumMay 1, 2025
• cloudflare workers-oauth-provider Missing validation of redirect_uri on authorize endpoint CVE-2025-4143 Fix available 6.0 MediumMay 1, 2025