Security
فارسی
All products

org.apache.cxf:cxf-rt-rs-security-oauth2

Maven · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache CXF OAuth2 TOCTOU Race Condition in Refresh Token ProcessingCVE-2026-50631 · GHSA-83R6-96M8-R52P org.apache.cxf:cxf-rt-rs-security-oauth2 Maven High Fix reported
Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security ControlCVE-2026-50628 · GHSA-G5V7-JCHF-7JRR org.apache.cxf:cxf-rt-rs-security-oauth2Red Hat Fuse 7/cxf-rt-rs-security-oauth2-saml MavenRed Hat Critical Fix reported
Apache CXF OAuth2 Log Injection via Unsanitized Client IdentifierCVE-2026-50629 · GHSA-F8P7-H97Q-7VX7 org.apache.cxf:cxf-rt-rs-security-oauth2 Maven High Fix reported
Apache CXF has Authentication Bypass in OAuth2 TokenIntrospectionServiceCVE-2026-50623 · GHSA-542G-M3FX-Q86F org.apache.cxf:cxf-rt-rs-security-oauth2 Maven Medium Fix reported
Apache CXF OAuth2 HTTP Response Splitting via WWW-Authenticate Realm InjectionCVE-2026-50630 · GHSA-XF62-WR5P-5P95 org.apache.cxf:cxf-rt-rs-security-oauth2 Maven Medium Fix reported
Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token ValidatorCVE-2026-50627 · GHSA-9MRV-8PVF-HF4M org.apache.cxf:cxf-rt-rs-security-oauth2Red Hat Fuse 7/cxf-rt-rs-security-oauth2-saml MavenRed Hat Critical Fix reported