wildfly-elytron-realm-token vulnerabilities

CVEs whose affected-version data names the wildfly-elytron-realm-token package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85511Medium· 4.2

4d ago

A flaw was found in EAP's Elytron

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding.

▾ SunlitRed Hat · wildfly-elytron-realm-tokenEPSS 0.13%via NVD