{"id":"CLSA-2025-1752247075","summary":"mod_auth_openidc: Fix of CVE-2025-3891","details":"- CVE-2025-3891: fix denial of service issue caused by sending empty POST\n  request when OIDCPreservePost directive is enabled","modified":"2026-05-27T11:15:59.853428417Z","published":"2025-07-11T15:17:59Z","upstream":["CVE-2025-3891"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1752247075.html"}],"affected":[{"package":{"name":"mod_auth_openidc","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/mod_auth_openidc?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9.4-1.el9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1752247075.json"}}],"schema_version":"1.7.5"}