CVE-2026-19362
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A vulnerability in lmammino oidc-authorizer 0.4.0 affects the function parse_token_from_header in src/parse_token_from_header.rs of the Authorization Header Parsing component. Manipulation of the argument authorization_token leads to denial of service. Remote exploitation is possible. The exploit has been disclosed and may be used. The vendor did not respond to early contact.
Risk Assessment
An attacker can remotely cause denial of service, potentially disrupting applications using oidc-authorizer.
Recommendation
Update oidc-authorizer to the latest version if available. Restrict access to the service and consider adding limits on authorization header size.
Original NVD description (English source)
A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parse_token_from_header of the file src/parse_token_from_header.rs of the component Authorization Header Parsing. The manipulation of the argument authorization_token leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.