org.springframework.security:spring-security-oauth2-jose vulnerabilities (Maven)

2 vulnerabilities.

• org.springframework.security:spring-security-oauth2-jose Maven Potential Security Misconfiguration when Using withIssuerLocation CVE-2026-22748 Fix available 5.3 MediumApril 22, 2026
• org.springframework.security:spring-security-oauth2-jose Maven Authorization Bypass During JWT Issuer Validation with spring-security CVE-2018-15801 Fix available 3.3 LowDecember 19, 2018