A vulnerability was found in pocket-id Pocket ID up to 2.3.x. It has been classified as problematic. Impacted is an unknown function. Performing a manipulation of the argument redirect_uri results in open redirect.
This vulnerability was named CVE-2026-28512. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
