Erlang Ecosystem Foundation

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Erlang Ecosystem Foundation records in CISA KEV

No Erlang Ecosystem Foundation vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-47469 CVE-2026-66883

Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup

MEDIUM 61

Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the user agent session binding inert, removing a defense in depth control against replay…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00365 Published 2026-08-04 Fixed in 0.5.0 CWE-178

TI-2026-47470 CVE-2026-66884

Cross-site request forgery in Erlang Ecosystem Foundation oidcc_plug

MEDIUM 44

Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an attacker to make a victim's browser complete an authorization flow the victim never i…

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00256 Published 2026-08-04 Fixed in 0.5.0 CWE-352

Open these records in search →

Critical	0
High	0
Medium	1
Low	1
No CVSS	0