Indieweb Indieauth vulnerabilities

• indieweb indieauth IndieAuth <= 4.5.4 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens CVE-2025-12028 Public exploit 8.8 HighOctober 24, 2025