API security vulnerabilities in open authentication (OAuth), including user account information, were recently discovered by Salt Security.