2 matches found
CVE-2026-22748
CVE-2026-22748 affects Spring Security when JWT decoding uses NimbusJwtDecoder or NimbusReactiveJwtDecoder and an OAuth2TokenValidator is not configured separately (e.g., via setJwtValidator). Impact is that the issue can affect authentication integrity (I) with MEDIUM overall severity (CVSS v3.1...
6.5CVSS5.7AI score0.00203EPSS
SaveExploits0References1Affected Software1
20