VULNRABLE / Vulnerability / CVE-2026-81888
CVE-2026-81888
MEDIUM LOW @hono/oauth-providers GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
@hono/oauth-providers: OAuth state check fails open on omitted state, enabling login CSRF and forced account linking
What this means
CVE-2026-81888 is a medium-severity vulnerability affecting @hono/oauth-providers, rated CVSS 5.5. Published September 1, 2026.
View full advisory at GHSA →