What’s Vulnerable › Products

Erlang Ecosystem Foundation oidcc_plug vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Erlang Ecosystem Foundation oidcc_plug version is affected

Latest Erlang Ecosystem Foundation oidcc_plug vulnerabilities

• CVE-2026-66884 — Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection (CVSS 2.1)
• CVE-2026-66883 — Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup (CVSS 6.3)