On 1/5/22, 6:34 AM, "users on behalf of Martin Haase" <users-bounces at shibboleth.net on behalf of Martin.Haase at DAASI.de> wrote: > can anybody tell if the pre-Plugin (2020) OIDC extension, i.e. v2.0.0 > suffers from that security issue likewise? Yes, same code. -- Scott