Skip to content

Pocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions

High severity GitHub Reviewed Published Apr 26, 2026 in pocket-id/pocket-id

No closed alerts for this advisory

Give feedback on Dependabot alerts