1929 matches found
CVE-2026-117468 Device-code claim permits restricted token escalation in Psono Server
Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a restricted API key-derived session could claim an attacker-controlled device code and obtain a full read-write session...
CVE-2026-117468 Device-code claim permits restricted token escalation in Psono Server
Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a restricted API key-derived session could claim an attacker-controlled device code and obtain a full read-write session...
CVE-2026-117468 Device-code claim permits restricted token escalation in Psono Server
Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a restricted API key-derived session could claim an attacker-controlled device code and obtain a full read-write session...
CVE-2026-117468
Psono Server versions 5.3.5 through 7.2.3 are vulnerable to a restricted token escalation due to a permission class that fails to enforce token write scope when claiming a device code. An authenticated remote attacker with a restricted API key-derived session can claim an attacker-controlled devi...
Psono Server permission and access control issue vulnerability
Versions 5.3.5 through 7.2.3 of Psono Server contain a vulnerability related to permission and access control. This issue arises because the permission class fails to enforce token write limits when claiming device code; as a result, authenticated remote attackers can exploit restricted API keys ...
RHLW-2026-4D628364A5512412 Lightwell Security Advisory: nimbus-jose-jwt 9.7.0.rhlw-00004
Red Hat Lightwell has released com.nimbusds:nimbus-jose-jwt 9.7.0.rhlw-00004 with a backported security fix. CVE-2025-53864: Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in...
CVE-2026-55459
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.requirealgorithm.withIssuerissuer.build and does not enforce the aud claim during...
EUVD-2026-109063
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.requirealgorithm.withIssuerissuer.build and does not enforce the aud claim during...
CVE-2026-55459
The Goobi viewer web application (versions 25.01 to before 26.05 ) contains an authentication vulnerability in AuthenticationEndpoint.verifyOpenIdToken. The application fails to enforce the aud claim during cryptographic validation when building the JWT verifier. Instead, it performs a manual str...
CVE-2026-55459 Goobi viewer: OpenID JWT audience not enforced by the verifier
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.requirealgorithm.withIssuerissuer.build and does not enforce the aud claim during...
CVE-2026-55459 Goobi viewer: OpenID JWT audience not enforced by the verifier
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.requirealgorithm.withIssuerissuer.build and does not enforce the aud claim during...
CVE-2026-55459 Goobi viewer: OpenID JWT audience not enforced by the verifier
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.requirealgorithm.withIssuerissuer.build and does not enforce the aud claim during...
EUVD-2026-108647
JwtClaims.MarshalJSON built a Go struct at runtime with reflect.StructOf, synthesising a field named "A" + claimName for each untyped claim. reflect.StructOf panics when a field name is not a valid Go identifier, or when it duplicates another field. Both conditions are reachable from ordinary JWT...
CVE-2026-89315 JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix
JwtClaims.MarshalJSON built a Go struct at runtime with reflect.StructOf, synthesising a field named "A" + claimName for each untyped claim. reflect.StructOf panics when a field name is not a valid Go identifier, or when it duplicates another field. Both conditions are reachable from ordinary JWT...
CVE-2026-89315 JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix
JwtClaims.MarshalJSON built a Go struct at runtime with reflect.StructOf, synthesising a field named "A" + claimName for each untyped claim. reflect.StructOf panics when a field name is not a valid Go identifier, or when it duplicates another field. Both conditions are reachable from ordinary JWT...
CVE-2026-89315
The JwtClaims.MarshalJSON function is vulnerable to a panic due to the use of reflect.StructOf at runtime. The application synthesizes field names by prepending "A" to untyped claim names; if these resulting names are not valid Go identifiers or result in duplicate fields, the program will crash....
PT-2026-122132
The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its verifier as JWT.requirealgorithm.withIssuerissuer.build and does not enforce the aud claim during...
EUVD-2026-106070
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...
EUVD-2026-106071
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...
CVE-2026-101666
Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Claim LOV. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management...