VendorsPocket-IDpocket_idany version
Vulnerabilities

Pocket-ID Pocket Id any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-43983
Pocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions
Published 2026-05-12 · Analyzed
8.5EPSS 0.004
CVE-2026-28513
Pocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange
Published 2026-03-09 · Analyzed
8.5EPSS 0.003
CVE-2026-28512
Pocket ID: OAuth redirect_uri validation bypass via userinfo/host confusion
Published 2026-03-09 · Analyzed
7.1EPSS 0.003