News · via oss-security
CVE-2026-92288: Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCredentials does not verify the client secret of a public Rely
Posted by Timothy Legge on Sep 24 ======================================================================== CVE-2026-92288 CPAN Security Group…