ueberauth vulnerabilities
5 published CVEs name ueberauth among the affected products.
- 5Published CVEs5 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55734
guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1
ueberauth · guardian
Medium6.9 - CVE-2026-55733
Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation
ueberauth · guardian
Medium6.9 - CVE-2026-54894
Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys
ueberauth · guardian
Medium6.9 - CVE-2026-55735
Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation
ueberauth · guardian
High8.2 - CVE-2026-55954
Missing ID token claim validation in ueberauth_apple allows account takeover
ueberauth · ueberauth_apple
Critical9.1