GHSA-9MRV-8PVF-HF4M Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator

The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' Audience claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be successfully replayed against a completely different Resource Server, leading to Token Confusion/Routing attacks. Users...

MAL-2022-4502 Malicious code in mattermost-oauth2-client-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c08d64e4f26feed57b76b4cb919c951c5568bc23b6a1fc9aa0bf328e85f80072 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...