API security vulnerabilities in open authentication (OAuth), including user account information, were recently discovered by Salt Security.
https://www.securitymagazine.com/articles/100082-api-open-authentication-vulnerabilities-discovered-by-researchers