← All credits
Reported by n0mi1k
7 vulnerability records and advisories credit this contributor.
CVE-2026-92121
Apache WSS4J: WS-SecurityPolicy signature checks skipped in the streaming code after an STR-Transform reference
CVE-2026-89238
Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection
CVE-2026-88920
Apache WSS4J: SAML Sender-Vouches Authentication Bypass
CVE-2026-87830
Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.
CVE-2026-92899
Apache WSS4J: UsernameToken replay protection bypassed by re-encoding the Nonce
CVE-2026-66909
Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage
CVE-2026-65432
Apache CXF: XXE via WSDL/XSD import parsing