npm/@cloudflare/workers-oauth-provider CVE-2025-4143: medium, EPSS 0.32%
@cloudflare/workers-oauth-provider missing validation of redirect_uri on authorize endpoint
Action: Upgrade @cloudflare/workers-oauth-provider to 0.0.5 or later.
npm i @cloudflare/workers-oauth-provider@0.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.5 | - |
Fixed versions
| 0.0.5 |
Sources
- osv: GHSA-4pc9-x2fx-p7vj
- https://github.com/cloudflare/workers-oauth-provider/security/advisories/GHSA-4pc9-x2fx-p7vj
- https://nvd.nist.gov/vuln/detail/CVE-2025-4143
- https://github.com/cloudflare/workers-oauth-provider/pull/26
- https://github.com/cloudflare/workers-oauth-provider
CVE-2025-4143 · published · modified · JSON