oidcc vulnerabilities

1 known vulnerability in oidcc from Erlef. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  oidcc: Improper Verification of Cryptographic Signature

  CVE-2026-75759Aug 30, 2026Erlef

  Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impersonate an arbitrary user via an encrypted ID token or JARM response carrying no nested signature. OpenID Connect Core 1.0 section 2 require