org.springframework.security:spring-security-oauth2-authorization-server vulnerabilities (TuxCare)

2 vulnerabilities.

• org.springframework.security:spring-security-oauth2-authorization-server TuxCare Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata CVE-2026-22752 Fix available 9.6 CriticalJuly 16, 2026
• org.springframework.security:spring-security-oauth2-authorization-server TuxCare CVE-2024-22258: PKCE Downgrade in Spring Authorization Server CVE-2024-22258 Fix available 6.1 MediumMarch 20, 2024