PT-2026-67694

Name of the Vulnerable Software and Affected Versions oidcc plug versions 0.2.0-beta.1 through 0.4.9 Description A Cross-Site Request Forgery issue in the Oidcc.Plug.AuthorizationCallback module allows an attacker to force a victim's browser to complete an unauthorized authorization flow. The...

PT-2026-67693

Name of the Vulnerable Software and Affected Versions oidcc plug versions 0.1.0-alpha.3 through 0.4.9 Description Improper handling of case sensitivity in the Oidcc.Plug.Authorize module renders the user agent session binding inert, removing a defense-in-depth control against the replay of stolen...

CVE-2026-66883: Improper Handling of Case Sensitivity

Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidccplug Oidcc.Plug.Authorize module renders the user agent session binding inert, removing a defense in depth control against replay of a stolen session. This vulnerability is associated with program files...