Skip to content

org.apache.cxf:cxf-rt-rs-security-sso-oidc vulnerabilities (Red Hat Lightwell)

2 vulnerabilities.

org.apache.cxf:cxf-rt-rs-security-sso-oidc Red Hat LightwellApache CXF: Self-issued ID token claims validation skippedCVE-2026-655839.1 CriticalAugust 6, 2026
org.apache.cxf:cxf-rt-rs-security-sso-oidc Red Hat LightwellApache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flowCVE-2026-578178.1 HighAugust 6, 2026