OIDC::Lite vulnerabilities

1 known vulnerability in OIDC::Lite from RITOU. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OIDC::Lite: Improper Verification of Cryptographic Signature

  CVE-2026-13089Jul 22, 2026RITOU

  OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self->alg($self->header->{alg}) f