Threats affecting pkg:github/taskview-community

Taskview Community versions before 1.56.0 have a missing authentication vulnerability in the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and requires no authentication. This flaw allows unauthenticated attackers to register arbitrary OAuth clients, craft malicious authorization links, and potentially take over user accounts by capturing authorization codes and exchanging them for access tokens. The vulnerability has a high severity score of 8.5 CVSS 4.0.