CVE-2026-115770

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services.

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services. From 2.2.0 until 2.12.0, SendEmailVerification uses the token model in backend/internal/model/email_verification_token.go to bind an email-verification token only to the user's identifier, while UpdateUser can change the account email without invalidating the outstanding token and VerifyEmail marks the current address as verified. An ordinary user can request a token for an…

5. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-115770