oss-security·12d agoCVE-2026-78336: Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated user#apache#cve-2026-78336#oidcCVE-2026-783361