Uueberauth

Products

Exploited and recent CVEs

• CVE-2026-55734 Medium 6.9 guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1 0.5%
• CVE-2026-55733 Medium 6.9 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation 0.5%
• CVE-2026-54894 Medium 6.9 Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys 0.5%
• CVE-2026-55735 High 8.2 Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation 0.5%
• CVE-2026-55954 Critical 9.1 Missing ID token claim validation in ueberauth_apple allows account takeover 0.5%