Unrated
Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole service.
CVE-2026-108062
First seen on SecPulse
References
- web emo@eclipse.org
- web emo@eclipse.org