erlef

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

erlef records in CISA KEV

No erlef vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-53034 CVE-2026-75759

Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc

HIGH 68

Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impersonate an arbitrary user via an encrypted ID token or JARM response carrying no nested signature.

CVSS 4.0HIGH 7.6 Network No auth User interaction EPSS 0.00216 Published 2026-08-30 Fixed in 3.9.0 CWE-347

TI-2024-20586 CVE-2024-31209 · GHSA-mj35-2rgf-cv8p

OpenID Connect client Atom Exhaustion in provider configuration worker ets table location

LOW 24

oidcc is the OpenID Connect client library for Erlang.

CVSS 3.1MEDIUM 5.3 Local High privileges No interaction EPSS 0.00235 Published 2024-04-04 Fixed in 3.0.2, 3.1.2 +1 CWE-400

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0