Vulnerabilities in ueberauth
5 resultsCVE-2026-55954CRITICALMissing ID token claim validation in ueberauth_apple allows account takeoverEPSS 0.5%CVE-2026-54894MEDIUMAtom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keysEPSS 0.5%CVE-2026-55734MEDIUMguardian atom exhaustion in Guardian.Permissions.encode_permissions!/1EPSS 0.5%CVE-2026-55733MEDIUMAtom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creationEPSS 0.5%CVE-2026-55735HIGHGuardian.revoke/3 acts on unverified token claims, allowing forged-token session revocationEPSS 0.5%