Ueberauth

5 CVEs across 2 Ueberauth products. Browse Ueberauth vulnerabilities, severities, and proof-of-concept exploits.

Ueberauth products with known CVEs

ProductCVEs
Guardian4
Ueberauth Apple1
Ueberauth CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-55735High7.52026-08-01Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Gu…
CVE-2026-55734High7.52026-08-01Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom…
CVE-2026-55733High7.52026-08-01Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary…
CVE-2026-54894High7.52026-08-01Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary…
CVE-2026-559542026-07-14Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover via unvalidated ID token claims. The Ueberauth.Strategy.A…