networknt

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

networknt records in CISA KEV

No networknt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Light-oauth2 1 record MEDIUM

Records

2 records

TI-2023-15125 CVE-2023-31580 · GHSA-mx47-h5fv-ghwh

light-oauth2 before version 2.1.27 obtains the public key without any verification.

MEDIUM 60

light-oauth2 before version 2.1.27 obtains the public key without any verification.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00686 Published 2023-10-24 Fixed in 2.1.27 CWE-295

TI-2026-76949 CVE-2026-113682 · GHSA-56rq-859m-p974

Authentication bypass in Networknt light-4j via empty LDAP password

MEDIUM 42

Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00562 Published 2026-10-20 Fixed in 2.4.0 CWE-287

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0