OpenIDC mod_auth_openidc vulnerabilities
4 published CVEs name OpenIDC mod_auth_openidc among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54789
mod_auth_openidc has out-of-bounds read and write in state cookie parsing
OpenIDC · mod_auth_openidc
High7.5 - CVE-2025-31492
mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data
OpenIDC · mod_auth_openidc
High8.2 - CVE-2024-24814
Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc
OpenIDC · mod_auth_openidc
High7.5 - CVE-2023-28625
mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied
OpenIDC · mod_auth_openidc
High7.5