News · via oss-security
CVE-2026-73179: Apache CXF: JPA authorization-code consume is non-atomic
Posted by Colm O hEigeartaigh on Oct 09 Severity: low Affected versions: - Apache CXF (org.apache.cxf:cxf-rt-rs-security-oauth2) 4.2.0 before 4.2.4 - Apache CXF…