OpenIDC mod_auth_openidc vulnerabilities
4 published CVEs name OpenIDC mod_auth_openidc among the affected products.
- Published CVEs
- 4
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20231
- 20241
- 20251
- 20261
Newest CVEs
- CVE-2026-54789
mod_auth_openidc has out-of-bounds read and write in state cookie parsing
OpenIDC · mod_auth_openidc
High7.5 - CVE-2025-31492
mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data
OpenIDC · mod_auth_openidc
High8.2 - CVE-2024-24814
Denial of service when manipulating mod_auth_openidc_session_chunks cookie in mod_auth_openidc
OpenIDC · mod_auth_openidc
High7.5 - CVE-2023-28625
mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied
OpenIDC · mod_auth_openidc
High7.5