CVE-2023-31580 (published 2023-10-24T00:00:00)
light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a