OpenIDC mod_auth_openidc

• CVE-2026-54789 High 7.5 mod_auth_openidc has out-of-bounds read and write in state cookie parsing 0.5%
• CVE-2025-31492 High 8.2 mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data 0.6%
• CVE-2024-24814 High 7.5 Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc 1.2%
• CVE-2023-28625 High 7.5 mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied 1.3%