It was discovered that missing input sanitising in the implementation
of the OIDCStripCookie option in mod_auth_openidc could result in
denial of service.

Read More