title: Red Hat Security Advisory: mod_auth_openidc:2.3 security update
description: mod_auth_openidc: open redirect in oidc_validate_redirect_url() mod_auth_openidc: hardcoded static IV and AAD with a reused key in AES GCM encryption mod_auth_openidc: XSS when using OIDCPreservePost On mod_auth_openidc: open redirect due to target_link_uri parameter not validated
cpes: cpe:/a:redhat:enterprise_linux:8::appstream