pocket-id vulnerabilities and fixes
Exploited and high-severity pocket-id vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 9.6CVE-2026-115770Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofingVerify fixpocket-id pocket-id
1 min read - 7.7CVE-2026-62662Pocket ID: Client credentials grant allows any OIDC client to obtain tokens for arbitrary audiencesVerify fixpocket-id pocket-id
1 min read