Skip to content

Erlang Ecosystem Foundation oidcc_plug

CVE-2026-66883 Medium 6.3 Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup 0.4%
CVE-2026-66884 Low 2.1 Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection 0.3%