Spring Security Spring Authorization Server vulnerabilities (CVE)

CVE records published for Spring Security Spring Authorization Server, newest first. Follow to get an email when a new one appears.

1 results

9.6Critical

CVE-2026-22752 3 months ago

Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

Spring Security Spring Authorization Server

Authentication bypass by primary weakness vulnerability in Spring Security Spring Authorization Server. This issue affects Spring Authorization Server: from 7.0.0 through 7.0.4, from 1.5.0 through 1.5.6, from 1.4.0 through 1.4.9, from 1.3.0 through 1.3.10.