Pocket-id Pocket Id vulnerabilities
- pocket-id pocket id, pocket-id +1 morePocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions8.5 High
- pocket-id pocket id, pocket-id +1 morePocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange8.5 High
- pocket-id pocket id, pocket-id +1 morePocket ID: OAuth redirect_uri validation bypass via userinfo/host confusion7.1 High