OAuth 5 Stealing OAuth access tokens via an open redirect Apr 16, 2025 OAuth account hijacking via redirect_uri Apr 15, 2025 Forced OAuth profile linking Apr 15, 2025 SSRF via OpenID dynamic client registration Apr 13, 2025 Authentication bypass via OAuth implicit flow Apr 13, 2025