📦 Scratchoauth2

This vulnerability in ScratchOAuth2 allows attackers to authenticate as other users by exploiting an issue in the SOA2Login::commented function. It affects downstream components that rely on ScratchOA...

This vulnerability allows third-party websites to trick Scratch users into revealing OAuth2 login codes, enabling attackers to impersonate users and gain full access to their Scratch accounts. It affe...