Topic
Every article tagged PKCE, newest first.
OAuth 2.1 is here. Discover the critical security upgrades that deprecate insecure parts of OAuth 2.0, how it strengthens OpenID Connect, and why it's essential for your applications in 2025.
Keep reading
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.