CVE-2026-11477
1 advisory.
Maven/org.hswebframework.web:hsweb-authorization-oauth2 CVE-2026-11477: medium 4.3
hsweb-framework has an open redirect issue
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.0.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fxr3-gvm4-m8vc
- https://nvd.nist.gov/vuln/detail/CVE-2026-11477
- https://github.com/hs-web/hsweb-framework/issues/354
- https://github.com/hs-web/hsweb-framework/pull/355
- https://github.com/hs-web/hsweb-framework/commit/c2882679a9125cea52678151af5ae213cbd52579
- https://github.com/hs-web/hsweb-framework
- https://vuldb.com/cve/CVE-2026-11477
- https://vuldb.com/submit/833962
- https://vuldb.com/vuln/369097
- https://vuldb.com/vuln/369097/cti
CVE-2026-11477 · published · modified · JSON