Erlang Ecosystem Foundation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| oidcc_plug | 2 | – | Aug 4, 2026 |
Exploited and recent CVEs
- CVE-2026-66883 Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup 0.4%
- CVE-2026-66884 Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection 0.3%