If you discover a security vulnerability within AdonisJS, please send an email to Harminder Virk at virk@adonisjs.com. All security vulnerabilities will be promptly addressed.
Security: adonisjs/ally
Security
docs/SECURITY.md
-
OAuth state check bypass in AdonisJS Ally allows login and account-linking CSRFGHSA-j577-w94j-8p3p published
Sep 27, 2026 by RomainLanzHigh
Learn more about advisories related to adonisjs/ally in the GitHub Advisory Database