Known Vulnerabilities in oauth2 0.4.1