Skip to content
OpenAdvisories

Package · Hex

guardian

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-55735

    Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation

    Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signatur…

    ueberauth guardian guardian Hex