Name of the Vulnerable Software and Affected Versions react-oauth-flow versions (affected versions not specified)

Description The issue is related to the improper implementation of the OAuth protocol in the react-oauth-flow package. It stores secrets in the front-end code and uses a confidential client on the browser instead of a public OAuth client. This could potentially allow attackers to compromise server credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.