All products

Red Hat JBoss Web Server 5/cxf-rt-rs-security-oauth2-saml

Red Hat · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security ControlCVE-2026-50628 · GHSA-G5V7-JCHF-7JRR org.apache.cxf:cxf-rt-rs-security-oauth2Red Hat Fuse 7/cxf-rt-rs-security-oauth2-saml MavenRed Hat Critical Fix reported
Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token ValidatorCVE-2026-50627 · GHSA-9MRV-8PVF-HF4M org.apache.cxf:cxf-rt-rs-security-oauth2Red Hat Fuse 7/cxf-rt-rs-security-oauth2-saml MavenRed Hat Critical Fix reported