panva/node-oidc-provider
main@ 1ed7795Fixes4
CVEs0
Peak severityHigh
Commits2,905
Regression coverage100.0%
Highlights
Signature Verification Bypass: 2 prior fixes. Scrutinize any change in this area.
lib/actions/credential.js: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authentication Bypass: 1 historical fix(es) link lib/actions/token/authorization_code.js to Authentication Bypass.
Authorization Bypass: 1 historical fix(es) link lib/actions/grants/client_credentials.js to Authorization Bypass.
Signature Verification Bypass: 1 historical fix(es) link lib/actions/credential.js to Signature Verification Bypass.
Last analyzed 30 Sep 2026, 02:53 UTC