passport-oauth2

npm1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting passport-oauth2page 1 of 1

CVE-2021-41580MEDIUMCVSS 5.3EG 5.3✓ Fixed in 1.6.1
2021-09-27
The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token. This is exploitable in certain use cases where an OAuth identity provider uses an HTTP 200 status code for authentica…

Check whether passport-oauth2 is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for passport-oauth2 CVEs against the assets you own.

Start Free Scan →