Skip to content
OpenAdvisories

Package · Maven

com.networknt:light-oauth2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2023-31580

    light-oauth2 missing public key verification

    light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.

    com.networknt:light-oauth2 Maven