org.springframework.security:spring-security-oauth2-authorization-server vulnerabilities (Maven)

2 vulnerabilities.

• org.springframework.security:spring-security-oauth2-authorization-server Maven Spring Security Authorization Server Open Redirect via request_uri CVE-2026-41008 Fix available 6.1 MediumJune 9, 2026
• org.springframework.security:spring-security-oauth2-authorization-server Maven CVE-2024-22258: PKCE Downgrade in Spring Authorization Server CVE-2024-22258 Fix available 6.1 MediumMarch 20, 2024