org.apache.cxf.archetype:cxf-jaxrs-service vulnerabilities (Red Hat Lightwell)
5 vulnerabilities.
org.apache.cxf.archetype:cxf-jaxrs-serviceRed Hat LightwellApache CXF: Self-issued ID token claims validation skipped9.1 Criticalorg.apache.cxf.archetype:cxf-jaxrs-serviceRed Hat LightwellApache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow8.1 Highorg.apache.cxf.archetype:cxf-jaxrs-serviceRed Hat LightwellApache CXF: Unsafe deserialization of inbound JMS ObjectMessage9.8 Criticalorg.apache.cxf.archetype:cxf-jaxrs-serviceRed Hat LightwellApache CXF: JNDI Injection Vulnerability in JMSConfigFactory8.1 Highorg.apache.cxf.archetype:cxf-jaxrs-serviceRed Hat LightwellApache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE)7.5 High