https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T16:36:19.592056+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-185928 EUVD-2026-185928 2026-10-09T16:36:19.594889+00:00 EUVD-2026-185928 https://cve.radiocsirt.org/vuln/fkie_cve-2023-31580 fkie_cve-2023-31580 2026-10-09T16:36:19.594921+00:00

light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.

 https://cve.radiocsirt.org/vuln/ghsa-mx47-h5fv-ghwh GHSA-mx47-h5fv-ghwh — light-oauth2 missing public key verification 2026-10-09T16:36:19.594951+00:00

Affected: Maven: com.networknt:light-oauth2

light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.

 https://cve.radiocsirt.org/vuln/gsd-2023-31580 gsd-2023-31580 2026-10-09T16:36:19.594974+00:00 gsd-2023-31580