Node-oauth Node-oauth/oauth2-server — known CVE vulnerabilities

Every CVE whose affected-product data names Node-oauth Node-oauth/oauth2-server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-41213 — CVSS 5.9 (medium): @node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid…