CVE-2026-59354 Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata

[
  {
    "vendor": "VMware by Broadcom",
    "product": "Spring Security (OAuth2 Authorization Server module)",
    "collectionURL": "https://repo.maven.apache.org/maven2/org/springframework/security/spring-security-oauth2-authorization-server/",
    "packageName": "org.springframework.security:spring-security-oauth2-authorization-server",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.4",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "7.0.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]