Skip to content
OpenAdvisories

Package · Maven

org.springframework.security:spring-security-oauth2-jose

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-22748

    Potential Security Misconfiguration when Using withIssuerLocation

    Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtDecoder  or NimbusReactiveJwtDecoder, it must configure an OAuth2TokenValidator<Jwt> separately, for example by calling setJwtValidator.This issue affects Sprin…

    Spring Spring Security thingsboard-tb-node apache-nifi Wolfi Maven