CVE-2026-117656 - Unverified Sign in with Apple callback parameter can override verified ID token claims
CVE ID :CVE-2026-117656 Published : Oct. 31, 2026, 12:16 a.m. | 1 hour, 44 minutes ago Description :Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth Assent allows an unauthenticated remote attacker to impersonate another...