Skip to content

Steeltoeoss Steeltoe.security.authentication.openidconnect vulnerabilities

steeltoeoss steeltoe.security.authentication.cloudfoundrybase, steeltoe.security.authentication.jwtbearer, steeltoe.security.authentication.openidconnect +2 moreSteeltoe's static JWKS cache shared across schemes and never invalidatedCVE-2026-50202Fix available5.9 MediumJune 17, 2026