https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 13:25:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08052 bdu:2025-08052 https://cve.radiocsirt.org/vuln/bdu:2025-08052 https://cve.radiocsirt.org/vuln/bit-apisix-2025-46647 <p><strong>Affected:</strong> Bitnami: apisix</p> <p>A vulnerability of plugin openid-connect in Apache APISIX.</p> <p>This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3. Multiple issuers share the same private key and relies only on the issuer being different</p> <p>If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers to log into the other issuer.</p> <p>This issue affects Apache APISIX: until 3.12.0.</p> <p>Users are recommended to upgrade to version 3.12.0 or higher.</p> <p><strong>Affected:</strong> Bitnami: apisix</p> <p>A vulnerability of plugin openid-connect in Apache APISIX.</p> <p>This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3. Multiple issuers share the same private key and relies only on the issuer being different</p> <p>If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers to log into the other issuer.</p> <p>This issue affects Apache APISIX: until 3.12.0.</p> <p>Users are recommended to upgrade to version 3.12.0 or higher.</p> https://cve.radiocsirt.org/vuln/bit-apisix-2025-46647 https://cve.radiocsirt.org/vuln/euvd-2026-259957 EUVD-2026-259957 https://cve.radiocsirt.org/vuln/euvd-2026-259957 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46647 <p>A vulnerability of plugin openid-connect in Apache APISIX.</p> <p>This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3. Multiple issuers share the same private key and relies only on the issuer being different</p> <p>If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers to log into the other issuer.</p> <p>This issue affects Apache APISIX: until 3.12.0.</p> <p>Users are recommended to upgrade to version 3.12.0 or higher.</p> <p>A vulnerability of plugin openid-connect in Apache APISIX.</p> <p>This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3. Multiple issuers share the same private key and relies only on the issuer being different</p> <p>If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers to log into the other issuer.</p> <p>This issue affects Apache APISIX: until 3.12.0.</p> <p>Users are recommended to upgrade to version 3.12.0 or higher.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-46647 https://cve.radiocsirt.org/vuln/ghsa-495r-5j65-5hp3 <p>A vulnerability of plugin openid-connect in Apache APISIX.</p> <p>This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3. Multiple issuers share the same private key and relies only on the issuer being different</p> <p>If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers to log into the other issuer.</p> <p>This issue affects Apache APISIX: until 3.12.0.</p> <p>Users are recommended to upgrade to version 3.12.0 or higher.</p> <p>A vulnerability of plugin openid-connect in Apache APISIX.</p> <p>This vulnerability will only have an impact if all of the following conditions are met: 1. Use the openid-connect plugin with introspection mode 2. The auth service connected to openid-connect provides services to multiple issuers 3. Multiple issuers share the same private key and relies only on the issuer being different</p> <p>If affected by this vulnerability, it would allow an attacker with a valid account on one of the issuers to log into the other issuer.</p> <p>This issue affects Apache APISIX: until 3.12.0.</p> <p>Users are recommended to upgrade to version 3.12.0 or higher.</p> https://cve.radiocsirt.org/vuln/ghsa-495r-5j65-5hp3