What’s Vulnerable › Products

Eclipse Foundation Eclipse CSI - PIA vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Eclipse Foundation Eclipse CSI - PIA version is affected

Latest Eclipse Foundation Eclipse CSI - PIA vulnerabilities

• CVE-2026-108062 — Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop (CVSS 6.9)
• CVE-2026-107597 — jwks_uri from the OIDC discovery document is fetched without checking its origin or scheme (CVSS 5.1)
• CVE-2026-18353 — Unauthenticated SSRF in PIA via OIDC issuer allowlist bypass (CVSS 8.8)
• CVE-2026-14336 — (CVSS 8.2)
• CVE-2026-12616 — (CVSS 6.9)