org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-79650 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-79650 Source advisory: MEND:CVE-2026-79650...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6) +17 more potentially affected by CVE-2026-73179 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.8)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =3.0.8, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.1.8 and more Source cves: CVE-2026-73179 Source advisory: MEND:CVE-2026-73179...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.3), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.3) potentially affected by CVE-2026-71575 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.3)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.3 Source cves: CVE-2026-71575 Source advisory: MEND:CVE-2026-71575...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-57817 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342000...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.2), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.2) potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-57817 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342000...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.2), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.2) potentially affected by CVE-2026-65583 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-65583 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342036...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-65583 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-65583 Source advisory: SNYK:JAVA-ORGAPACHECXF-19342036...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-65583 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-65583 Source advisory: MEND:CVE-2026-65583...

io.github.martinhickson:picketlink-oidc (>=3.0.8, <=5.2.6), org.apache.cxf.systests:cxf-systests-rs-security (>=4.0.0, <=4.1.7) +1 more potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.0.0, <=4.1.7)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.0.0, =3.0.8, =4.0.0, =4.0.0, =4.1.7 Source cves: CVE-2026-57817 Source advisory: MEND:CVE-2026-57817...

org.apache.cxf.systests:cxf-systests-rs-security (>=4.2.0, <=4.2.2), org.apache.cxf:apache-cxf (>=4.2.0, <=4.2.2) potentially affected by CVE-2026-57817 via org.apache.cxf:cxf-rt-rs-security-sso-oidc (>=4.2.0, <=4.2.2)

org.apache.cxf:cxf-rt-rs-security-sso-oidc MAVEN version =4.2.0, =4.2.0, =4.2.0, =4.2.2 Source cves: CVE-2026-57817 Source advisory: MEND:CVE-2026-57817...

org.apache.cxf.systests:cxf-systests-rs-security (3.6.7), org.apache.cxf:apache-cxf (3.6.7) +5 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.6.7)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.cxf.systests:cxf-systests-rs-security 3.6.7 -...

org.apache.cxf.systests:cxf-systests-rs-security (3.6.12), org.apache.cxf:apache-cxf (3.6.12) +5 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.6.12)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.cxf.systests:cxf-systests-rs-security 3.6.12 -...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), no.ks.fiks:adresseregisteret-client (>=1.0.0-rc1, <=1.4.0) +17 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (>=4.0.0, <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version =4.0.0, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50634 Source advisory: GHSA-33J8-J763-4FV5...

org.apache.cxf.systests:cxf-systests-rs-security (3.0.7) potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.0.7)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.cxf.systests:cxf-systests-rs-security 3.0.7 Source cves:...

org.apache.cxf.systests:cxf-systests-rs-security (3.0.12), org.apache.cxf:apache-cxf (3.0.12) +4 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.0.12)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.cxf.systests:cxf-systests-rs-security 3.0.12 -...

org.apache.cxf.systests:cxf-systests-rs-security (3.1.4) potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.1.4)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.cxf.systests:cxf-systests-rs-security 3.1.4 Source cves:...

org.apache.camel:camel-linkedin (>=2.19.4, <=2.19.5), org.apache.camel:camel-linkedin-api (>=2.19.4, <=2.19.5) +29 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.13)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel:camel-linkedin =2.19.4, =2.19.4, =2.19.4, =2.19.4, =2.19.4,...

org.apache.cxf.systests:cxf-systests-rs-security (2.7.6), org.apache.cxf:apache-cxf (2.7.6) +2 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.7.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.cxf.systests:cxf-systests-rs-security 2.7.6 -...

org.apache.cxf.systests:cxf-systests-rs-security (2.7.15), org.apache.cxf:apache-cxf (2.7.15) +2 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (2.7.15)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 2.7.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.cxf.systests:cxf-systests-rs-security 2.7.15 -...

de.cezaryrk.olingo:odata-fit (5.0.1-renamed), no.ks.fiks:adresseregisteret-client (>=1.0.0-rc1, <=1.4.0) +16 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (>=4.0.0, <=4.1.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version =4.0.0, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =4.7.0, =4.0.0-m1, =3.0.0-m1, =3.0.0-m1, =3.0.0-m1, =4.0.0-m1, =4.0.0-m1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.6 and more Source cves: CVE-2026-50623 Source advisory: GHSA-542G-M3FX-Q86F...