Passportjs Passport-oauth2 — known CVE vulnerabilities

Every CVE whose affected-product data names Passportjs Passport-oauth2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2021-41580 — CVSS 5.3 (medium): The passport-oauth2 package before 1.6.1 for Node.js mishandles the error condition of failure to obtain an access token. This is…