← All credits

Mathias Polligkeit

2 vulnerability records and advisories credit this contributor.

CVE-2026-66884
Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection
CVE-2026-66883
Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup