The CamelHive Standard · v3.25.0
CH-SEC-029v3.25.0El callback de OAuth/OIDC valida state/nonce/PKCE atados a la sesión, y rechaza cuando falta cualquiera de los dos lados
Pinned as it read in catalog v3.25.0 — the current version of this rule may read differently, see CH-SEC-029.
- Area
- SEC
- Severity
- high
- Detection
- llm
- Corpus coverage
- not measured by the corpus