org.apache.cxf:cxf-rt-rs-security-oauth2 vulnerabilities

CVEs whose affected-version data names the org.apache.cxf:cxf-rt-rs-security-oauth2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73179High· 8.1

3w ago

Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurr…

Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid access tokens from a single authorization code via concurr…

▾ TwilightApache Software Foundation · org.apache.cxf:cxf-rt-rs-security-oauth2EPSS 0.40%via NVD