https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T15:01:34.740057+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-3891 CVE-2025-3891 — Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled 2026-10-04T15:01:35.944477+00:00

Affected: mod_auth_openidc, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9 and 5 more

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to trigger a denial of service by sending an empty POST request when the OIDCPreservePost directive is enabled. The server crashes consistently, affecting availability.

 https://vulnerability.circl.lu/vuln/rhsa-2025:10002 RHSA-2025:10002 — Red Hat Security Advisory: mod_auth_openidc security update 2026-10-04T15:01:35.944608+00:00

mod_auth_openidc: DoS via Empty POST in mod_auth_openidc with OIDCPreservePost Enabled

 https://vulnerability.circl.lu/vuln/rhsa-2025:4597 RHSA-2025:4597 — security update for cjose 2026-10-04T15:01:35.944644+00:00

security update for cjose