maven package report

Is io.micronaut.security:micronaut-security-oauth2 safe?

1 known vulnerability, worst severity MODERATE.

cvss

4.8

how bad it is if exploited, out of 10

epss

0.40%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-qw22-8w9r-864h, the advisory selected below

// advisories

GHSA-qw22-8w9r-864h

MODERATECVE-2023-36820

IdTokenClaimsValidator skips aud claim validation if token is issued by same identity issuer/provider.

Affected: >= 3.11.0, < 3.11.1, >= 3.1.0, < 3.1.2, >= 3.6.0, < 3.6.6, >= 3.3.0, < 3.3.2, >= 3.10.0, < 3.10.2, >= 3.8.0, < 3.8.4, >= 3.2.0, < 3.2.4, >= 3.7.0, < 3.7.4, >= 3.5.0, < 3.5.3, >= 3.4.0, < 3.4.3, >= 3.9.0, < 3.9.6
Fixed in: 3.11.1
Weakness: CWE-284
Published: 2023-10-05
Source: github

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 01:52 UTC. The most recent advisory here was published 2023-10-05. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is io.micronaut.security:micronaut-security-oauth2 safe? maven package security report | CyberXYZ