184072 matches found
CVE-2026-74240 Quay: jwt claim validation bypasses in quay federated robot and sso authentication
A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...
CVE-2026-74240 Quay: jwt claim validation bypasses in quay federated robot and sso authentication
A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...
CVE-2026-74240
A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...
CVE-2026-74240
The CVE concerns Red Hat Quay’s JWT validation for federated robot accounts and SSO, where flawed audience verification and insufficient enforcement of azp and sub allow a token from the same identity provider to bypass security boundaries, potentially leading to unauthorized access where audienc...
CVE-2026-74240
A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...
MINI-G5R6-4FCJ-J79P
Bulletin has no description...
MINI-H6XJ-3PQG-FHQ5
Bulletin has no description...
CVE-2026-73683
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
CVE-2026-63650
OpenVPN 2.7_alpha1 through 2.7.5 with mbedTLS is affected by a misidentification issue where remote authenticated users can be misidentified due to ignoring the configured X.509 username identity lookup field. The vulnerability affects OpenVPN components from the specified 2.7 alpha to 2.7.5 rang...
CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
CVE-2026-73683
CVE-2026-73683 affects Laravel Socialite’s Facebook provider. The flaw allows unauthenticated attackers to replay captured OIDC id_tokens via a missing nonce validation in FacebookProvider.php’s getUserByOIDCToken(), so a valid, unexpired id_token for the same Facebook App ID can be submitted to ...
CVE-2026-73683
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay
Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...
MINI-9XV6-MF37-53HJ
Bulletin has no description...
CVE-2026-49844 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis-fips, apache-activemq-fips, pinot-fips, solr, apache-activemq-artemis, pinot, traccar-fips, apache-hop-fips, airbyte-server-fips, zaproxy, celeborn, geoserver, ghidra, flink, kafbat-ui-fips, ranger, sonarqube, spdx-tools-java, hono,...