CVE-2021-41580
1 advisory.
npm/passport-oauth2 CVE-2021-41580: medium 5.3
Improper Access Control in passport-oauth2
Action: Upgrade passport-oauth2 to 1.6.1 or later.
npm i passport-oauth2@1.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.1 | - |
Fixed versions
| 1.6.1 |
Sources
- osv: GHSA-f794-r6xc-hf3v
- https://nvd.nist.gov/vuln/detail/CVE-2021-41580
- https://github.com/jaredhanson/passport-oauth2/pull/144
- https://github.com/jaredhanson/passport-oauth2/commit/8e3bcdff145a2219033bd782fc517229fe3e05ea
- https://github.com/jaredhanson/passport-oauth2
- https://github.com/jaredhanson/passport-oauth2/compare/v1.6.0...v1.6.1
- https://medium.com/passportjs/no-access-token-no-service-7fb017c9e262
CVE-2021-41580 · published · modified · JSON