CVE-2026-47877

creationtimestamp| type| source ---|---|--- 2026-08-27 06:45:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7umnmveqqjybc 2026-08-27 07:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu2bmprjhj2b 2026-09-03 19:07:06+00:00| seen|...

ch.admin.bit.jeap:jeap-oauth-mock-server (>=5.4.0, <=10.0.0), ch.admin.bit.jeap:jeap-oauth-mock-server-instance (>=5.4.0, <=10.0.0) +80 more potentially affected by CVE-2026-47877 via org.springframework.security:spring-security-oauth2-authorization-server (7.1.0)

org.springframework.security:spring-security-oauth2-authorization-server MAVEN version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-oauth2-authorization-server and may be impacted: -...

cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)

cve-2026-47877 - HIGH - Spring Security Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting XSS...