Vulnerabilities

TI-2026-47469 CVE-2026-66883

Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup

MEDIUM 61

Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the user agent session binding inert, removing a defense in depth control against replay…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00365 Published 2026-08-04 Fixed in 0.5.0 CWE-178

TI-2026-47470 CVE-2026-66884

Cross-site request forgery in Erlang Ecosystem Foundation oidcc_plug

MEDIUM 44

Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an attacker to make a victim's browser complete an authorization flow the victim never i…

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00256 Published 2026-08-04 Fixed in 0.5.0 CWE-352

Vulnerabilities

Filters

Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup

Cross-site request forgery in Erlang Ecosystem Foundation oidcc_plug