Pocket ID: The client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences
Go github.com/pocket-id/pocket-id/backend · Upgrade to 0.0.0-20260622164202-8158452b3730 (pre-release) or later · < 0.0.0-20260622164202-8158452b3730 · CVE-2026-62662 · GHSA-q4xm-p75h-h9p3 · amended