Vulnerabilities

TI-2026-33530 CVE-2026-45795

Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server

MEDIUM 63

The Janssen Project is an open-source identity and access management (IAM) platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00193 Published 2026-07-16 Fixed in 2.0.0 CWE-347

TI-2025-34610 CVE-2025-54876

LOW 37

The Janssen Project is an open-source identity and access management (IAM) platform.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00546 Published 2025-08-05 No fix listed CWE-522

TI-2025-33007 CVE-2025-53003 · GHSA-373j-mhpf-84wg

HIGH 75

The Janssen Project is an open-source identity and access management (IAM) platform.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0041 Published 2025-07-01 Fixed in 1.8.0 CWE-200