Known vulnerabilities in libapache2-mod-auth-openidc (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:libapache2-mod-auth-openidc_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libapache2-mod-auth-openidc (Debian package) libapache2-mod-auth-openidc (Debian package) is affected by 4 known vulnerabilities: 4 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136688 - Out-of-bounds read
CVE-2026-54789
CWE-125 Medium
No
No
2.4.17-1+deb13u1 02.07.2026 SB2026070228
SB2026071939
SB2026071940
and 15 more
#VU112073 - Improper input validation
CVE-2025-3891
CWE-20 Medium
No
No
2.4.12.3-2+deb12u4 01.07.2025 SB2025070118
SB2025070119
SB2025070120
and 11 more
#VU107147 - Exposure of sensitive information to an unauthorized actor
CVE-2025-31492
CWE-200 Medium
No
No
2.4.12.3-2+deb12u3 08.04.2025 SB2025040831
SB2025040833
SB2025040834
and 22 more
#VU74352 - NULL Pointer Dereference
CVE-2023-28625
CWE-476 Medium
No
No
2.4.9.4-0+deb11u3 04.04.2023 SB2023040417
SB2023041466
SB2023051853
and 7 more