News · via oss-security
CVE-2026-71575: Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter
Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-security-sso-oidc) 4.2.0 before 4.2.4 - Apache CXF…