Skip to content
OpenAdvisories

Vendor

VMware by Broadcom

1 known vulnerabilities.

Products

Spring Security (OAuth2 Authorization Server module) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-59354

    Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata

    In versions of Spring Security's OAuth2 Authorization Server module 7.0.0 through 7.0.4, when Dynamic Client Registration is explicitly enabled, the registration endpoint performs insufficient validation of certain client metadata fields supplied by the regis…

    VMware by Broadcom Spring Security (OAuth2 Authorization Server module)