Security
فارسی
All products

Red Hat build of Apache Camel for Spring Boot 4/cxf-rt-rs-security-oauth2

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache CXF OAuth2 TOCTOU Race Condition in Refresh Token ProcessingCVE-2026-50631 · GHSA-83R6-96M8-R52P org.apache.cxf:cxf-rt-rs-security-oauth2Red Hat Fuse 7/cxf-rt-rs-security-oauth2 MavenRed Hat High Fix reported
org.apache.cxf/cxf-rt-rs-security-oauth2: Apache CXF: Generation of multiple access tokens via authorization code race conditionCVE-2026-73179 Red Hat Fuse 7/cxf-rt-rs-security-oauth2Red Hat JBoss Web Server 5/cxf-rt-rs-security-oauth2 Red Hat Low No fix reported
org.apache.cxf/cxf-rt-rs-security-oauth2: Apache CXF: Revocation bypass allows unauthorized accessCVE-2026-68481 Red Hat JBoss Enterprise Application Platform Expansion Pack/cxf-rt-rs-security-oauth2Red Hat JBoss Web Server 5/cxf-rt-rs-security-oauth2 Red Hat Medium No fix reported
cxf: Apache CXF: Privilege Escalation via OAuth2 Dynamic Client Registration Scope Self-AssignmentCVE-2026-61466 Red Hat Fuse 7/cxf-rt-rs-security-oauth2Red Hat JBoss Web Server 5/cxf-rt-rs-security-oauth2 Red Hat Medium No fix reported
org.apache.cxf/cxf: Apache CXF: Authorization Code Replay via Race ConditionCVE-2026-57818 Red Hat JBoss Web Server 5/cxf-rt-rs-security-oauth2Red Hat build of Apache Camel for Spring Boot 4/cxf-rt-rs-security-oauth2 Red Hat Medium No fix reported