PatchTheCVEueberauth vulnerabilities
Recent CVEs affecting ueberauth products. 4 tracked.
ueberauth has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-08-01. Highest priority: CVE-2026-54894 (score 46/100).
- CVE-2026-54894 HIGH 7.5 UPGRADE Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unboun
- CVE-2026-55733 HIGH 7.5 UPGRADE Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unboun
- CVE-2026-55734 HIGH 7.5 UPGRADE Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions
- CVE-2026-55735 HIGH 7.5 UPGRADE Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to r
FAQ
How do I fix ueberauth vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ueberauth being exploited right now?
None of the tracked ueberauth CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ueberauth CVE should I patch first?
CVE-2026-54894 currently ranks highest (46/100): Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unboun.