pow-auth assent

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-1176560.1.25 – < 0.3.2Unverified Sign in with Apple callback parameter can override verified ID token claimsCRITICAL 9.30.2 %