All products

Red Hat build of Quarkus/quarkus-spring-security

Red Hat · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Spring Security authorization rules can be bypassed via forward or include dispatcher typesCVE-2022-31692 · GHSA-MMMH-WCXM-2WR4 org.springframework.security:spring-security-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat Critical Fix reported
Spring Security logout not clearing security contextCVE-2023-20862 · GHSA-X873-6RGC-94JC org.springframework.security:spring-security-coreRed Hat Decision Manager 7/spring-security MavenRed Hat Medium Fix reported