CVE-2026-23965

creationtimestamp| type| source ---|---|--- 2026-01-22 05:19:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcygrvsvs324 2026-01-24 21:23:09+00:00| seen| https://gist.github.com/alon710/91521cc5d46c08c88e76d31982727895 2026-01-24 22:20:24+00:00| seen|...

cn.herodotus.engine:oauth2-authentication-autoconfigure (>=3.5.5.3 <=3.5.6.2), cn.herodotus.engine:oauth2-authorization-server-autoconfigure (>=3.3.0.5 <=3.5.5.2) +2 more potentially affected by CVE-2026-23965 via org.webjars.npm:sm-crypto (=0.3.13)

org.webjars.npm:sm-crypto MAVEN version =0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:sm-crypto and may be impacted: - cn.herodotus.engine:oauth2-authentication-autoconfigure =3.5.5.3, =3.3.0.5, =3.3.0.5, =3.5.5.3, =3.5.6.2...