Skip to content

Yiisoft Yii2-authclient vulnerabilities

yiiframework yii2-authclientyii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementationCVE-2023-50708Fix available6.1 MediumDecember 18, 2023
yiiframework yii2-authclientThe Oauth2 PKCE implementation is vulnerableCVE-2023-50714Fix available6.8 MediumDecember 18, 2023