CVE-2026-94276: Apache APISIX: Openid-connect introspection validation issue
Apache APISIX versions 3.12.0–3.18.0 can accept a token introspected as active for the wrong issuer.
Stories per day · 30 days
2 RSS
1 stories, newest first · one card per story