Products: 3
    Vulnerabilities: 20
    Known Exploited: 0
    1
    Critical Level Threats
    8
    High Level Threats
    10
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-53939

    OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption

    Last Modified: Sep 13, 2026
    Published: Sep 08, 2026

    CVE-2026-53938

    OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)

    Last Modified: Sep 13, 2026
    Published: Sep 08, 2026

    CVE-2026-54789

    mod_auth_openidc has out-of-bounds read and write in state cookie parsing

    Last Modified: Sep 02, 2026
    Published: Aug 21, 2026

    CVE-2026-54431

    Improper Data Validation in liboauth2

    Last Modified: Jul 06, 2026
    Published: Jul 02, 2026

    CVE-2026-54430

    Server-Site Request Forgery in liboauth2

    Last Modified: Jul 06, 2026
    Published: Jul 02, 2026
    Items Per Page
    Openidc Vulnerabilities & Security CVEs | CVE-DB