To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.

Available as part of the Tidelift Subscription.

The maintainers of oauth2 and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source packages you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact packages you use. Learn more.