PatchTheCVEopenid connect provider vulnerabilities and fixes
Recent CVEs affecting openid connect provider, with upgrade or downgrade steps. 1 tracked.
Also searched as: openidconnectprovider.
openid connect provider has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-14. Highest priority: CVE-2025-47884 (score 44/100).
- CVE-2025-47884 CRITICAL 9.1 UPGRADE In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses
FAQ
How do I fix openid connect provider vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openid connect provider being exploited right now?
None of the tracked openid connect provider CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openid connect provider CVE should I patch first?
CVE-2025-47884 currently ranks highest (44/100): In Jenkins OpenID Connect Provider Plugin 96.vee8ed882ec4d and earlier the generation of build ID Tokens uses .