Vulnerability Database - OSV

CVE-2026-66884

github.com/erlef/oidcc_plug

Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or... 04 Aug

Fix available
Severity - 2.1 (Low)

EEF-CVE-2026-66884

Hex/oidcc_plug
github.com/erlef/oidcc_plug

Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection 04 Aug

Fix available
Severity - 2.1 (Low)