| Package | Affected versions | Patched versions |
|---|---|---|
| powershell universal | < 2026.1.3 | 2026.1.3 |
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free