Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method in github.com/pocket-id/pocket-id/backend

概要

参考情報

• pocket-id/pocket-id security advisory · ADVISORY
• pocket-id/pocket-id commit 978ac87 · WEB
• pocket-id/pocket-id release v2.6.0 · WEB

github.com/pocket-id/pocket-id/backend のその他の脆弱性

• CVE-2026-55834中 4.3Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.6.0 until 2.9.0, frontend/src/routes…
• GHSA-hp74-gm6m-2qm5中Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that a…
• CVE-2026-43983高 8.1Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.6.0, The createTokenFromRef…
• CVE-2026-28513高 7.1Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoin…
• CVE-2026-28512中 6.1Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. From 2.0.0 to before 2.4.0, a flaw in …