Vulnerabilities in OpenIDC
10 resultsCVE-2023-28625HIGHmod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is suppliedEPSS 1.3%CVE-2024-24814HIGHDenial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidcEPSS 1.3%CVE-2020-26244MEDIUMCryptographic issues in Python oicEPSS 0.8%CVE-2023-37464HIGHIncorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjoseEPSS 0.7%CVE-2025-31492HIGHmod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected dataEPSS 0.6%CVE-2026-54789HIGHmod_auth_openidc has out-of-bounds read and write in state cookie parsingEPSS 0.5%CVE-2026-53939CRITICALOpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryptionEPSS 0.2%CVE-2026-53938HIGHOpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)EPSS 0.2%CVE-2026-54431MEDIUMImproper Data Validation in liboauth2EPSS 0.2%CVE-2026-54430MEDIUMServer-Site Request Forgery in liboauth2EPSS 0.2%