Known Vulnerabilities in oauth2