1 spill in 12 months for Chat apps

Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.

Past orders

  1. criticalpatched FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider fof/oauth (composer) ### Impact An unauthenticated account takeover vulnerability exists in `fof/oauth` when the Discord OAuth provider is enabled. Discord allows an account to use an unverified email address when its phone number has been verified. During OAuth authentication, Discord may return that email address with `"verified": false`. Affected versions of `fof/oauth`… fixed in fof/oauth 1.7.4 +1CVE-2026-921615 sources

Follow Chat apps

RSS: /feed.xml?stack=messaging. JSON: /incidents.json?stack=messaging. Or add it to your usual for delivery.