micronaut-security

1 result · Clear filters · Feed

• Medium 4.8
  CVE-2023-36820

  micronaut security has invalid IdTokenClaimsValidator logic on aud

  Micronaut Security is a security solution for applications. Prior to versions 3.1.2, 3.2.4, 3.3.2, 3.4.3, 3.5.3, 3.6.6, 3.7.4, 3.8.4, 3.9.6, 3.10.2, and 3.11.1, IdTokenClaimsValidator skips `aud` claim validation if token is issued by same identity issuer/pro…

  micronaut-projects micronaut-security io.micronaut.security:micronaut-security-oauth2 Maven
  Oct 9, 2023