3 results · Clear filters · Feed
-
Medium 5.1
jwks_uri from the OIDC discovery document is fetched without checking its origin or scheme
PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer and then follows the `jwks_uri` contained in that response without parsing it as a URL, comparing it against the approved issuer's origin, …
-
Medium 6.9
Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop
Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole service.
-
Medium 6.9
The /v1/upload/sbom endpoint extracts the iss claim from the attacker-supplied JWT with signature verification disabled…