8 matches found
GHSA-659M-PX2C-25WJ vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi-registry, keycloak-config-cli...
CVE-2026-9828 vulnerabilities
Vulnerabilities for packages: zookeeper, sonarqube, sonar-scanner-cli, cassandra-reaper, nextflow, cassandra, management-api-for-apache-cassandra-5.0, kserve-modelmesh, trino, keycloak-config-cli, dependency-track, akhq...
GHSA-9342-92GG-6V29 vulnerabilities
Vulnerabilities for packages: sonarqube, jenkins, wildfly, apache-nifi, apicurio-registry, thingsboard, keycloak-config-cli, dependency-track, keycloak...
CVE-2025-49006
Wasp Web Application Specification is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6, Wasp authentication has a vulnerability in the OAuth authentication implementation affecting only Keycloak with a specific config. Wasp currently lowercases OAuth user IDs before...
CVE-2025-49006 Wasp has case insensitive OAuth ID vulnerability
Wasp Web Application Specification is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6, Wasp authentication has a vulnerability in the OAuth authentication implementation affecting only Keycloak with a specific config. Wasp currently lowercases OAuth user IDs before...
CVE-2025-49006
CVE-2025-49006 concerns Wasp (Web Application Specification), a Rails-like framework used with React/Node/Prisma. Prior to 0.16.6, the OAuth implementation lowercases OAuth user IDs before storing/fetching, which can violate OAuth/OpenID Connect specs and lead to user impersonation, account colli...
