{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.0.1"}],"component":"org.hswebframework.web:hsweb-authorization-oauth2","cve_ids":["CVE-2026-11477"],"ecosystem":"Maven","epss":0.00303,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fxr3-gvm4-m8vc","id":"tcs_01M5N8WZFSMV7W4M979JCTXERM","modified_at":"2026-07-28T21:11:49.406082Z","published_at":"2026-06-08T03:47:24Z","references":["https://osv.dev/vulnerability/GHSA-fxr3-gvm4-m8vc","https://nvd.nist.gov/vuln/detail/CVE-2026-11477","https://github.com/hs-web/hsweb-framework/issues/354","https://github.com/hs-web/hsweb-framework/pull/355","https://github.com/hs-web/hsweb-framework/commit/c2882679a9125cea52678151af5ae213cbd52579","https://github.com/hs-web/hsweb-framework","https://vuldb.com/cve/CVE-2026-11477","https://vuldb.com/submit/833962","https://vuldb.com/vuln/369097","https://vuldb.com/vuln/369097/cti"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-fxr3-gvm4-m8vc","url":"https://osv.dev/vulnerability/GHSA-fxr3-gvm4-m8vc"}],"summary":"hsweb-framework has an open redirect issue"}