OAuth Flaw Exposed Millions of Airline Users to Account TakeoversBy rooter / January 28, 2025 The now-fixed vulnerability involved a major travel services company that’s integrated with dozens of airline websites worldwide.