← All credits
Guanping Zhang reported this vulnerability
7 vulnerability records and advisories credit this contributor.
CVE-2026-73179
Apache CXF: JPA authorization-code consume is non-atomic
CVE-2026-79650
Apache CXF: OIDC RP Open Redirect
CVE-2026-71575
Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter
CVE-2026-50628
Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control
CVE-2026-68481
Apache CXF: Revocation bypass in DefaultEncryptingOAuthDataProvider
CVE-2026-68079
Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
CVE-2026-57818
Apache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider