CVE-2026-87004 - Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification
CVE ID :CVE-2026-87004 Published : Sept. 30, 2026, 6:18 p.m. | 20 minutes ago Description :Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/providers/auth_oidc_provider.py decodes the...