CVE-2021-31556: Fedoraproject Fedora

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. MWOAuthConsumerSubmitControl.php does not ensure that the length of an RSA key will fit in a MySQL blob.

Affected products

• Fedoraproject Fedora: version 33 only; version 34 only; version 35 only
• Mediawiki Mediawiki: up to and including 1.35.2

Published 2021-08-12. Last modified 2026-06-17.