Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

erlcodex JWT 'none' algorithm signature validation flaw & PoC

github.com 2026-08-30 查看中文 →
Security Advisory High erlef/oidcc
Affected:
  • erlef/oidcc v3.0.0
Fixed in:
  • erlef/oidcc v3.0.0 (commit 5f62fbc)
Referenced CVEs: CVE-2026-75759 · 7.6
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
AshSQLite CVE-2026-77346 JSONPath Injection Analysis & PoC 2026-08-30 Ash Sqlite JSON Path Traversal: Fix & PoC 2026-08-30 OIDC Library CVE-2020-16759: Encrypted Unsigned ID Token Accepted, Allowing Identity Spoofing 2026-08-30 AshPaperTrail Sensitive Data Expiration Vulnerability (CVE-2026-73847) 2026-08-30 AshPaperTrail: Fix Sensitive Attribute Marking Logic in CreateVersionResource 2026-08-30
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro