OpenID
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| OpenID Connect | 1 | – | Mar 3, 2025 |
Exploited and recent CVEs
- CVE-2025-27370 OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt authentication mechanism is used, a malicious Authorization Server could trick a 0.3%