Product by Debian
Libapache2-mod-auth-openidc
4 known vulnerabilities in Libapache2-mod-auth-openidc (Debian), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-3891 | Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled | 7.5 | |
| High | CVE-2026-54789 | mod_auth_openidc has out-of-bounds read and write in state cookie parsing | 7.5 | |
| High | CVE-2023-28625 | mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied | 7.5 | |
| High | CVE-2025-31492 | mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data | — |