OAuth 5

• Stealing OAuth access tokens via an open redirect 16/04/2025
• OAuth account hijacking via redirect_uri 15/04/2025
• Forced OAuth profile linking 15/04/2025
• SSRF via OpenID dynamic client registration 13/04/2025
• Authentication bypass via OAuth implicit flow 13/04/2025