CVE-2026-108062: Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop
Published Oct 20, 2026
·Updated
Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole service.
Event History
Oct 20, 2026
CVE Published
via MITRE·10:04 AM
Data Sourced
via MITRE·10:04 AM
DescriptionWeakness
Data Sourced
via NVD·11:17 AM
DescriptionSeverityWeakness