org.wildfly.security/wildfly-elytron-password-impl vulnerabilities

CVEs whose affected-version data names the org.wildfly.security/wildfly-elytron-password-impl package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-19611High· 7.4

2mo ago

A flaw was found in WildFly Elytron

A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII equivalents. A remote attacker can more easily guess affected passwords by using a…

▾ TwilightRed Hat · org.wildfly.security/wildfly-elytron-password-implEPSS 0.89%via NVD