Packages

ueberauth_apple

0.7.0

0.7.0 0.6.2 0.6.1 0.6.0 0.4.0 0.3.0 0.2.0 0.1.0

An Ueberauth strategy for Apple authentication.

HexDocs Report package

Current section

1 Advisory

Jump to

Documentation 8 Versions 4 Dependencies 4 Dependants 1 Advisory Files Activity

EEF-CVE-2026-55954 CVE-2026-55954 GHSA-pxx8-68pc-p9mr

Missing ID token claim validation in ueberauth_apple allows account takeover

July 14, 2026

CVSS

9.1 / 10.0 Critical

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 0.6.2

References

https://cna.erlef.org/cves/CVE-2026-55954.html
https://github.com/ueberauth/ueberauth_apple/commit/01e2d9c9b3134e1b78633ad82d136d5ff4a61f28
https://github.com/ueberauth/ueberauth_apple/security/advisories/GHSA-pxx8-68pc-p9mr
https://hex.pm/packages/ueberauth_apple

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions

this version

7 643

yesterday

481

last 7 days

8 863

all time

260 793

Last Updated

Jul 14, 2026

License

MIT

Build Tools

mix

Publisher

ueberauth

Owners

ueberauth

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

ueberauth_apple

Checksum

Dependency Config

Package Details

Links

Owners

Search filters