{"id":"CVE-2026-108062","published":"2026-10-20T11:17:16.513","lastModified":"2026-10-20T19:48:50.250","description":"Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole service.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-400"],"vendors":[],"products":[],"references":[{"url":"https://github.com/eclipse-csi/pia/security/advisories/GHSA-jj77-2gc8-7pc6","tags":[]},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/400","tags":[]}],"exploitRefs":[{"url":"https://github.com/eclipse-csi/pia/security/advisories/GHSA-jj77-2gc8-7pc6","tags":[]}],"hasPoc":true,"ai":null}