Skip to content
OpenAdvisories

Package · Hex

oidcc

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    OpenID Connect client Atom Exhaustion in provider configuration worker ets table location

    oidcc is the OpenID Connect client library for Erlang. Denial of Service (DoS) by Atom exhaustion is possible by calling `oidcc_provider_configuration_worker:get_provider_configuration/1` or `oidcc_provider_configuration_worker:get_jwks/1`. This issue has bee…