GHSA-QHR6-6CGV-6638 Improper Memory Cleanup in the Okta Java SDK

Description In the Okta Java SDK, specific multithreaded implementations may encounter memory issues as threads are not properly cleaned up after requests are completed. Over time, this can degrade performance and availability in long-running applications and may result in a denial-of-service...

Improper Memory Cleanup in the Okta Java SDK

Description In the Okta Java SDK, specific multithreaded implementations may encounter memory issues as threads are not properly cleaned up after requests are completed. Over time, this can degrade performance and availability in long-running applications and may result in a denial-of-service...

Okta Java Management SDK 竞争条件问题漏洞

Okta Java Management SDK is an open source Java development toolkit from Okta, Inc. A Competitive Condition Issue vulnerability exists in Okta Java Management SDK versions 11.0.0 through 20.0.0, which arises from concurrent requests using the ApiClient class that may result in a competitive...

PT-2025-50545

Name of the Vulnerable Software and Affected Versions Okta Java Management SDK versions 21.0.0 through 24.0.0 Description The Okta Java Management SDK, used for interacting with the Okta management API, has a potential issue in multithreaded implementations. Versions 21.0.0 through 24.0.0 may...

PT-2025-50553

Name of the Vulnerable Software and Affected Versions Okta Java Management SDK versions 11.0.0 through 20.0.0 Description The Okta Java Management SDK, used for interacting with the Okta management API, is susceptible to race conditions when handling concurrent requests utilizing the ApiClient...

Okta Java Management SDK 安全漏洞

Okta Java Management SDK is an open source Java development toolkit from Okta, Inc. A security vulnerability exists in Okta Java Management SDK versions 21.0.0 through 24.0.0, which stems from improper thread cleanup and could result in a denial of service...

How to Streamline Zero Trust Using the Shared Signals Framework

Zero Trust helps organizations shrink their attack surface and respond to threats faster, but many still struggle to implement it because their security tools don't share signals reliably. 88% of organizations admit they've suffered significant challenges in trying to implement such approaches,...

EUVD-2025-199226

Malicious code in okta-react-router-6 npm...

Malicious code in okta-react-router-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3641ce0ba5810e0edb58d9251065f65ddf54d4a3fca6ef20f36fa46723b741 The package okta-react-router-6 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191137 Malicious code in okta-react-router-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3641ce0ba5810e0edb58d9251065f65ddf54d4a3fca6ef20f36fa46723b741 The package okta-react-router-6 was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-148225

Malicious code in tealove-okta11 npm...

MAL-2025-168593 Malicious code in tealove-okta17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921eafc1ce0c0ee928c88e71feb06bc2bd601245ff8c2be454366439ce1bb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168589 Malicious code in tealove-okta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d213c7e123524e5920b2377b0425c71246ae1bae72fb628013e1dccb978ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148222

Malicious code in tealove-okta14 npm...

EUVD-2025-148219

Malicious code in tealove-okta17 npm...

Malicious code in tealove-okta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32a61ad89e11f0cb5d5601a6297484a3c183441ac4e0c02e58bb91bd414e7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-lapis99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96f061ebaffa2f6efc024b800556fbadb7fca4399f74535e8009659ff04a14f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-rujak7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4b5288966c870878119a06e6511e04f41397521de4a7b09c3b34e5d32335e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9936196116a484732dcc2944dbf868a17affff487ed2fb72f90c455fc3a42ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-mieaceh79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0597f5d23c87f23dae82486a32c9a8c0ab121922d58cbca3ea377dcfb2b7fddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...