Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Honojs
@hono/oauth-providers
Honojs @hono/oauth-providers vulnerabilities
honojs
@hono/oauth-providers
@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking
CVE-2026-81888
Fix available
5.4
Medium
August 31, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open