Advisories · Technology

RITOU OIDC::Lite.

Every CVE that names RITOU OIDC::Lite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-13089 CVE record

CVSS 7.5 High

OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify
- RITOU OIDC::Lite
- Weak cryptography or TLS
Not analysed yet 22 Jul 2026