2828 matches found
EUVD-2025-0186
Malicious code in bioql PyPI...
EUVD-2019-0745
Malicious code in bioql PyPI...
EUVD-2022-3693
Malicious code in bioql PyPI...
EUVD-2023-2361
Malicious code in bioql PyPI...
EUVD-2024-0659
Malicious code in bioql PyPI...
EUVD-2022-41815
Malicious code in bioql PyPI...
EUVD-2025-24563
Malicious code in bioql PyPI...
EUVD-2024-1249
Malicious code in bioql PyPI...
RLSA-2025:7490 Important: mod_auth_openidc security update
The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc allows OIDCProviderAuthRequestMethod POSTs to leak...
mod_auth_openidc security update
An update is available for modauthopenidc. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an OpenID Connect authentication module for...
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps
A high-severity security flaw has been disclosed in the One Identity OneLogin Identity and Access Management IAM solution that, if successfully exploited, could expose sensitive OpenID Connect OIDC application client secrets under certain circumstances. The vulnerability, tracked as CVE-2025-5936...
Open Redirect
Overview @lobehub/chat is a Lobe Chat - an open-source, high-performance chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application. Affected versions of this package are...
CVE-2025-59426 lobe-chat has an Open Redirect
Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...
Insufficient Session Expiration
github.com/coder/coder/v2 is vulnerable to Insufficient Session Expiration. The vulnerability is due to session expiration bypass due to Coder allowing a web session to remain active when the OpenID Connect provider does not return a refresh token, so the session can continue past the IdP-issued...
Lobe Chat 安全漏洞
Lobe Chat is an open source, high performance chatbot framework open sourced from LobeHub. A security vulnerability exists in Lobe Chat versions prior to 1.130.1 that stems from the OIDC redirect processing logic constructing redirect URLs based on unvalidated X-Forwarded-Host or Host headers and...
GHSA-XPH5-278P-26QX lobe-chat has an Open Redirect
Description --- Vulnerability Overview The project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a reverse proxy forwards client-supplied X-Forwarded-...
Amazon Linux 2023 : mod_auth_openidc (ALAS2023-2025-1188)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1188 advisory. modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.16.11, a bug in...
CVE-2025-59363
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...
PT-2025-37401
Name of the Vulnerable Software and Affected Versions One Identity OneLogin versions prior to 2025.3.0 Description A security issue exists in One Identity OneLogin that allows attackers to potentially steal sensitive OpenID Connect OIDC application client secrets. This is possible through a reque...