VOOZH about

URL: https://intel.aikido.dev/packages/packagist/league/oauth2-server

⇱ league/oauth2-server - Packagist package | Aikido Intel


Package Health/league/oauth2-server

league/oauth2-server

A lightweight and powerful OAuth 2.0 authorization and resource server library with support for all the core specification grants. This library will allow you to secure your API with OAuth and allow your applications users to approve apps that want to access their data from your API.

Latest 9.4.1👁 Packagist
Packagist

98%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

95

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10853 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
league/oauth2-server is vulnerable to Generation of Error Message Containing Sensitive Information in versions 0.0.1 - 9.2.0.
0.0.1 - 9.2.0
Low
AIKIDO-2024-10388 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
league/oauth2-server is vulnerable to Return of Wrong Status Code in versions 6.0.2 - 8.5.4.
6.0.2 - 8.5.4
Low
CVE-2023-37260
league/oauth2-server is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 8.3.2 - 8.4.2 and 8.5.0 - 8.5.3.
8.3.2 - 8.4.28.5.0 - 8.5.3
High

Package versions

Maintainers

👁 Image
Alex Bilbie
👁 Image
Andy Millington

Direct Dependencies

DependencyLast ReleaseScore
psr/clock
Version ^1.0
league/uri
Version ^7.8
lcobucci/jwt
Version ^5.6
league/event
Version ^3.0
psr/http-message
Version ^2.0

98%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

95

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Weekly Downloads

Info

Last Published
3 days ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Subscribe
Stay up to date with all updates
© 2026 Aikido Security BV | BE0792914919
Keizer Karelstraat 15, 9000, Ghent, Belgium
95 Third St, 2nd Fl, San Francisco, CA 94103, US
Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK
Ghent, Belgium | San Francisco, US
👁 SOC 2
SOC 2Compliant
👁 ISO 27001
ISO 27001Compliant