roadiz/openid vulnerabilities (Packagist)

1 vulnerability.

• roadiz/openid Packagist Roadiz OpenID Connect nonce generated but never validated — ID token replay attack CVE-2026-42206 Fix available 5.7 MediumApril 29, 2026