Threats affecting pkg:github/nextcloud/user_oidc

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 0.4%	CVE-2026-45156nextcloud security-advisories · Improper Authentication High8.1EPSS 0.4%2026-06-01CVE Database V5CVE-2026-45156 Nextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, 5.0.0 to before 5.1.0, and 6.0.0 to before 6.4.0, a missing signature verification in User OIDC allowed a malicious ID4me authority to identify as any user. This issue has been patched in versions 3.1.0, 4.1.0, 5.1.0, 6.4.0 and 8.3.0. EPSS 0.4%Vulnerability CWE-287	CVE Database V5	2026-06-01

Page 1 of 1