CVE-2026-66071

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag: scope values. extractscopes/1 parses scopes of the form .tag: and calls rabbitdatacoercion:toatom to convert to a tag atom. The token signature is...

EUVD-2026-87151

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag: scope values. extractscopes/1 parses scopes of the form .tag: and calls rabbitdatacoercion:toatom to convert to a tag atom. The token signature is...

Malicious Package

Overview oauth2-jwt-bearer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2024-12104 Malicious code in oauth2-jwt-bearer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36fb17415b72312cf7dda66e2cfcb35ec7340bb75ae0fd7dfe1b3821f8039579 The OpenSSF Package Analysis project identified 'oauth2-jwt-bearer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in oauth2-jwt-bearer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36fb17415b72312cf7dda66e2cfcb35ec7340bb75ae0fd7dfe1b3821f8039579 The OpenSSF Package Analysis project identified 'oauth2-jwt-bearer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Open-Xchange: Path Traversal in dict-fs and no-check Escape Character in oauth2-jwt

0x01 Path Traversal in dict-fs module If we use fs to store dictionaries, when program get the value of key: static int fsdictlookupstruct dict dict, poolt pool, const char key, const char valuer, const char errorr struct fsdict dict = struct fsdict dict; struct fsfile file; struct istream input;...