Packages

oidcc_plug

0.5.1
0.5.1 0.5.0 retired 0.4.0 0.3.2 0.3.1 0.3.0 0.2.2 0.2.1 0.2.0 0.2.0-beta.1 0.1.2 0.1.1 0.1.0 0.1.0-rc.2 0.1.0-rc.1 0.1.0-alpha.4 0.1.0-alpha.3 0.1.0-alpha.2 0.1.0-alpha.1

Plug Integration for the oidcc OpenID Connect Library

HexDocs Report package

Current section

2 Advisories

Jump to
Documentation
License
19 Versions
3 Dependencies
0 Dependants
2 Advisories
Files
Activity
EEF-CVE-2026-66883 CVE-2026-66883 GHSA-w5r8-m75h-98fc

Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup

August 04, 2026
CVSS
?
6.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0-alpha.3 and < 0.5.0
EEF-CVE-2026-66884 CVE-2026-66884 GHSA-fg66-w5gp-22cr

Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection

August 04, 2026
CVSS
?
2.1 / 10.0 Low
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.2.0-beta.1 and < 0.5.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 500 1000 1500 2000

this version

6 256

yesterday

166

last 7 days

3 796

all time

180 925

Last Updated

Aug 04, 2026

License

Apache-2.0

Build Tools

mix

Publisher

erlefsecuritywg erlefsecuritywg

Links

Owners