Current section
1 Advisory
Jump to
Current section
1 Advisory
Unverified Sign in with Apple callback parameter can override verified ID token claims
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-117656.html
- https://github.com/pow-auth/assent/commit/18898bde0296152165ae470078490e5798329b1b
- https://github.com/pow-auth/assent/commit/a2d331e8c51376d6c0b04a81aad31e0b4d4d64a3
- https://github.com/pow-auth/assent/security/advisories/GHSA-9fr5-g44g-9526
- https://hex.pm/packages/assent
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
1 383
yesterday
8 643
last 7 days
54 182
all time
2 427 452