← All credits

This issue was independently reported by Ho1aAs (GitHub: @HolaAsuka) and also found using Claude agents to study the security of open-source projects

1 vulnerability record and advisories credit this contributor.

CVE-2026-85532
Apache WSS4J: Insufficient Validation of Derived-Key Parameters