Kafka OAuth JWT issuer and audience checks off by default (CVE-2026-110952)
The bundled JWKS validator always checks the signature, but iss and audience checks need explicit settings.
1 stories, newest first · one card per story
The bundled JWKS validator always checks the signature, but iss and audience checks need explicit settings.
Today 840 readers · 1.1K views · 843 reads · all time 159K views