cloudfoundry/uaa
develop@ 0bfdaa9Fixes14
CVEs1
Peak severityHigh
Commits10,594
Regression coverage14.3%
Highlights
Authentication Bypass: 3 prior fixes. Scrutinize any change in this area.
server/src/main/java/org/cloudfoundry/identity/uaa/util/UaaUrlUtils.java: most-fixed (2 issues). Treat as high-risk during review.
12 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Open Redirect: 2 historical fix(es) link server/src/main/java/org/cloudfoundry/identity/uaa/util/UaaUrlUtils.java to Open Redirect.
Authentication Bypass: 1 historical fix(es) link org.cloudfoundry.identity.uaa.provider.oauth.ExternalOAuthAuthenticationFilter to Authentication Bypass.
Authentication Bypass: 1 historical fix(es) link UaaTokenServices.java to Authentication Bypass.
Last analyzed 30 Sep 2026, 02:50 UTC