In JetBrains Hub prior to 2020.1.12099, content spoofing in the Hub OAuth error message was possible.
jetbrains hub