erlef/oidcc

Releases59

Frequency2 months 14 hours

Last Release 2 months ago

Stars228

OpenId Connect client library in Erlang & Elixir

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-31209 ↗	Apr 4, 2024Thursday, 4 April 2024, 16:15	5.3 MEDIUM	—
oidcc is the OpenID Connect client library for Erlang. Denial of Service (DoS) by Atom exhaustion is possible by calling `oidcc_provider_configuration_worker:get_provider_configuration/1` or `oidcc_provider_configuration_worker:get_jwks/1`. This issue has been patched in version(s)`3.1.2` & `3.2.0-beta.3`.