Unverified50% confidenceReleaseExact time

Sync-in 2.5 fixes a number of security issues including an OIDC account binding vulnerability.

1

Sources

50%

Confidence

Medium-term (~90 days)

Relevance

9/5/2026

First Seen

Valid until: 12/4/2026

Sources

Sync-in 2.5 Released: Comprehensive Security and UX Upgrade for Self-Hosted File Collaboration

Related Entities

Sync-inproduct OIDCtechnology

Related Claims

Unverified共享账号模式下账号轮换插件需在本地管理认证凭证（如Session Token或OAuth Token），打破了Cursor原生安全链条，增加了数据泄露的攻击面60% similar UnverifiedMD5 has been proven to have collision vulnerabilities and is no longer suitable for high-security scenarios such as password storage.58% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/859264

API

curl https://kongchang.com/api/v1/knowledge/claims/859264

MCP

get_claim(id=859264)