loading . . . AI slop security engineering: Oktaâs nextjs-0auth troubles In October, I reported two security issues to Oktaâs auth0/nextjs-auth0 project, here and here. The latter bug, an oauth parameter injection, allows for a range of types of abuse, like scoping tokens⊠https://joshua.hu/ai-slop-okta-nextjs-0auth-security-vulnerability