CVE-2026-11477

A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/org/hswebframework/web/oauth2/server/OAuth2Client.java of the component OAuth2 Client. The manipulation results in op...

CVE-2026-11470

A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the file hsweb-system/hsweb-system-file/src/main/java/org/hswebframework/web/file/FileUploadProperties.java of the component File Upload. The manipulation of the argument filename...

GHSA-FXR3-GVM4-M8VC hsweb-framework has an open redirect issue

A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/org/hswebframework/web/oauth2/server/OAuth2Client.java of the component OAuth2 Client. The manipulation results in op...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.8) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.8)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2 4.0....

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.9) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.9)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2 4.0....

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.13) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.13)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.15) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.15)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.17) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.17)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.18) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.18)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.10) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.10)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.11) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.11)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.16) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.16)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (>=5.0.0, <=5.0.1) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (>=5.0.0, <=5.0.1)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version =5.0.0, =5.0.0, =5.0.1 Source cves: CVE-2026-11477 Source advisory: OSV:GHSA-FXR3-GVM4-M8VC...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.14) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.14)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.19) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.19)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.20) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.20)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

hsweb-framework has an open redirect issue

A vulnerability was detected in hs-web hsweb-framework up to 5.0.1. This affects the function OAuth2Client of the file hsweb-authorization/hsweb-authorization-oauth2/src/main/java/org/hswebframework/web/oauth2/server/OAuth2Client.java of the component OAuth2 Client. The manipulation results in op...

org.hswebframework.web:hsweb-system-authorization-oauth2 (>=5.0.0, <=5.0.1) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (>=5.0.0, <=5.0.1)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version =5.0.0, =5.0.0, =5.0.1 Source cves: CVE-2026-11477 Source advisory: GHSA-FXR3-GVM4-M8VC...

org.hswebframework.web:hsweb-system-authorization-oauth2 (4.0.12) potentially affected by CVE-2026-11477 via org.hswebframework.web:hsweb-authorization-oauth2 (4.0.12)

org.hswebframework.web:hsweb-authorization-oauth2 MAVEN version 4.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.hswebframework.web:hsweb-authorization-oauth2 and may be impacted: - org.hswebframework.web:hsweb-system-authorization-oauth2...

GHSA-VJMR-F5FC-VR2W hsweb-framework has a Path Traversal issue

A vulnerability has been found in hs-web hsweb-framework up to 5.0.1. The affected element is the function denied of the file hsweb-system/hsweb-system-file/src/main/java/org/hswebframework/web/file/FileUploadProperties.java of the component File Upload. The manipulation of the argument filename...