This vulnerability in lmammino oidc-authorizer 0.4.0 arises from improper handling of the authorization_token argument in the parse_token_from_header function within src/parse_token_from_header.rs. An attacker can remotely exploit this flaw to cause a denial of service condition. The issue was publicly disclosed, but the vendor has not provided any response or remediation. No patch or workaround has been documented, and the vulnerability remains unmitigated as of the publication date.

Successful exploitation results in denial of service, potentially disrupting the availability of the oidc-authorizer component. There is no indication of privilege escalation, data disclosure, or other impacts beyond service interruption. The vulnerability can be triggered remotely without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider implementing network-level protections such as filtering or rate limiting requests targeting the Authorization header parsing functionality until a patch is released.