Pow-auth Assent vulnerabilities

• pow-auth assent Unverified Sign in with Apple callback parameter can override verified ID token claims CVE-2026-117656 Fix available 9.3 CriticalOctober 30, 2026
• powauth powassent, pow-auth pow assent +1 more PowAssent is susceptible to denial of service attacks CVE-2019-16764 Fix available 6.5 MediumNovember 25, 2019