stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verification, captcha, and shield verification. Attackers can cre...

CVE-2024-58360

stoatchat versions before 0.7.8 fail to enforce account creation restrictions including invite-only mode, email verifica

历史摘要 · 未重新核验 · NVD

Ech0's OAuth redirect URI validation ignores path component, enables exchange-code theft

## Summary `parseAndValidateClientRedirect` at `internal/service/auth/auth.go:448` validates OAuth client-redirect URIs

历史摘要 · 未重新核验 · GitHub Advisory