Published Sep 25, 2026
CVSS
CRITICAL
EPSS
Affected packages
FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider