https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:59:18 +0000 https://vulnerability.circl.lu/vuln/cve-2021-22573 <p><strong>Affected:</strong> Google LLC Google-oauth-java-client</p> <p>The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token&#39;s payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payload. The token will pass the validation on the client side. We recommend upgrading to version 1.33.3 or above</p> <p><strong>Affected:</strong> Google LLC Google-oauth-java-client</p> <p>The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token&#39;s payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payload. The token will pass the validation on the client side. We recommend upgrading to version 1.33.3 or above</p> https://vulnerability.circl.lu/vuln/cve-2021-22573