Threats tagged 'cleanstart-2026-gh74416'

A security vulnerability in the wso2am package involves Apache CXF’s OIDC relying-party component, which could redirect users to an attacker-controlled URL after successful authentication. This could lead to limited confidentiality and integrity impacts. The issue affects versions prior to 4.7.0-r4 and has been assigned CVE-2026-79650 with a medium severity rating.