Skip to content
OpenAdvisories

Vendor

JanssenProject

3 known vulnerabilities.

Products

jans 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-45795

    Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server

    The Janssen Project is an open-source identity and access management (IAM) platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload() returns …

    JanssenProject jans
  • Medium 6.9
    CVE-2025-54876

    Jans CLI stores plaintext passwords in the local cli_cmd.log file

    The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease.

    JanssenProject jans