Skip to content

[GHSA-5x6j-m6jc-q2r5] Apache WSS4J accepted attacker-controlled derived-key len... - #9892

Draft
oscerd wants to merge 1 commit into
github:oscerd/advisory-improvement-9892from
oscerd:oscerd-GHSA-5x6j-m6jc-q2r5
Draft

oscerd wants to merge 1 commit into
github:oscerd/advisory-improvement-9892from
oscerd:oscerd-GHSA-5x6j-m6jc-q2r5

Conversation

@oscerd

@oscerd oscerd commented Sep 30, 2026

Copy link
Copy Markdown

Updates

  • Affected products
  • Source code location

Comments
Affected packages, version ranges and source code location are taken from the official Apache WSS4J security advisory: https://lists.apache.org/thread.html/7jllcpbf4nbzhdp2vchz5yplnl5w6vd6

Claude Code on behalf of oscerd

🤖 Generated with Claude Code

…ed-key len...

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Signed-off-by: Andrea Cosentino <ancosen@gmail.com>
@github-actions
github-actions Bot changed the base branch from main to oscerd/advisory-improvement-9892 September 30, 2026 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant