https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 08:26:39 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-114277 <p>Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz&#39;s optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue.</p> <p>Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz&#39;s optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-114277 https://db.gcve.eu/vuln/ghsa-rvg3-9pfp-h479 <p>Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz&#39;s optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue.</p> <p>Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBiz. Apache OFBiz&#39;s optional Janrain Engage Social Login integration in the ecommerce component improperly binds authenticated external identities to local user accounts. This issue affects Apache OFBiz: before 24.09.08. Users are recommended to upgrade to version 24.09.08, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-rvg3-9pfp-h479