Launchpad.net

CVE 2020-5233

OAuth2 Proxy before 5.0 has an open redirect vulnerability. Authentication tokens could be silently harvested by an attacker. This has been patched in version 5.0.

See the CVE page on Mitre.org for more details.