CVE-2026-43983

NVD data not available for this CVE. It may be pending analysis or not yet published.

Related Intelligence (1)

HIGHVulnerabilityPOC

NVD HIGH: CVE-2026-43983 — Pocket ID is an OIDC provider that allows users to authenticate with their passk...

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.6.0, The createTokenFromRefreshToken function (oidc_service.go) validates the refresh token's cryptographic integrity but does not re-validate the user's current authorization state before issuing new tokens. This allows (1) the client to refresh the token indefinitely after authorizati

CVE-2026-43983
NIST NVD