identity_platform_and_firebase_authentication vulnerabilities

CVEs whose affected-version data names the identity_platform_and_firebase_authentication package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85268High· 8.7

1w ago

Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID

A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary Java…

▾ TwilightGoogle Cloud · Identity Platform and Firebase AuthenticationEPSS 0.58%via CVEORG