oauth2-server

v3.1.1npm· JavaScript

Complete, framework-agnostic, compliant and well tested module for implementing an OAuth2 Server in node.js

The verdict

Has 2 high-severity advisories. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the npm registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security2 advisories

LicensePermissive

DepsModerate

Maintenance

Last published 5 years ago.

Popularity

Download count unavailable.

Security

2 known advisories (worst: high severity).

License

MIT

Dependencies

6 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Code Injection in oauth2-server
GHSA-2fw4-mgq9-39cx Published 2021-04-22
HIGH
oauth2-server through 3.1.1 vulnerable to Open Redirect
GHSA-4rg6-fm25-gc34 Published 2022-08-30

Recent releases