CVE-2026-108062

CVE-2026-108062 · Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole service.

CVSS 6.9 · Medium · EPSS 0.5%

Published: 2026-10-20T10:04:35.382Z
Updated: 2026-10-20T15:41:39.646Z

Affected products and versions

eclipse csi - pia
Versions
- ≥ 0, ≤ 0.8.0: Affected (semver)
No fix published

Original sources

https://github.com/eclipse-csi/pia/security/advisories/GHSA-jj77-2gc8-7pc6
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/400
https://nvd.nist.gov/vuln/detail/CVE-2026-108062

Check your server →

CVE-2026-108062 · Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop

Affected products and versions

eclipse csi - pia

Original sources