OffSequenceJun 11
๐Ÿ”’ HIGH severity: Spring for GraphQL (v1.0.0 โ€“ 2.0.3) is affected by CVE-2026-41856 โ€” improper access control can bypass security annotations, risking unauthorized access. Review your authorization logic ASAP. https://radar.offseq.com/threat/cve-2026-41856-cwe-284-improper-access-control-in--4879e7fe #OffSeq #SpringSecurity #GraphQL
Analyst207May 12

SAP Patches Critical Flaws in Commerce Cloud and S/4HANA

SAP has patched a critical vulnerability in its Commerce Cloud and S/4HANA systems, warning that hackers could exploit the flaw to upload malicious code and take control of the application. This security gap, caused by a misconfigured Spring Security setup, put sensitive data and system integrity at risk.

https://osintsights.com/sap-patches-critical-flaws-in-commerce-cloud-and-s4hana?utm_source=mastodon&utm_medium=social

#SapCommerceCloud #Cve202634263 #CodeInjection #ServersideCodeExecution #SpringSecurity

SAP Patches Critical Flaws in Commerce Cloud and S/4HANA

Learn how SAP patches critical flaws in Commerce Cloud and S/4HANA, including CVE-2026-34263, and take immediate action to secure your systems now.

OSINTSights
PalaceLivingMay 2

๐Ÿ”ฅ Dokumentasi arsitektur terbaru sudah live.

"Delving Deep: How Spring Security Works Internally - Filters"

๐Ÿ”— Akses repositori/dokumentasi: https://www.dragonflistudios.com/pasca-klik-kematian-antarmuka-dan-kebangkitan-konversi-kognitif/

#springsecurity #java #security

IAMDevBoxApr 8

Learn how to implement OAuth 2.1 using Spring Security 6 for robust application security. Perfect for developers looking to enhance their projects.

https://iamdevbox.com/posts/ciba-client-initiated-backchannel-authentication-decoupled-authentication-flows/?utm_source=mastodon&utm_medium=social&utm_campaign=blog_post

#oauth21 #springsecurity #authentication #devops

IAMDevBoxApr 6

Learn how to implement OAuth 2.1 with Spring Security 6 for robust application security. Dive into IAMDevBox.com for more insights.

https://iamdevbox.com/posts/implementing-oauth-21-with-spring-security-6/?utm_source=mastodon&utm_medium=social&utm_campaign=blog_post

#oauth21 #springsecurity #iamdevbox #authentication

Implementing OAuth 2.1 with Spring Security 6

Learn how to implement OAuth 2.1 with Spring Security 6 for secure authentication and authorization. Complete guide with code examples and security tips.

IAMDevBox
InfoQMar 24

Check out what's new in the #Spring community ๐Ÿ‘‰ https://bit.ly/3NMwcbY

The third milestone releases of: Spring Boot, Spring Security, Spring Integration, Spring AI and Spring AMQP; along with the second milestone releases of Spring Data and Spring for Apache Kafka.

#Java #SpringBoot #SpringData #SpringSecurity #SpringAI #SpringVault #ApacheKafka

OffSequenceMar 20
๐Ÿšจ CVE-2026-22732 (CRITICAL, CVSS 9.1): Spring Security 5.7.0 โ€“ 7.0.3 vulnerability lets HTTP headers go unwritten, risking CSP/HSTS bypass. No auth needed, remote exploit possible. Upgrade urgently & enforce headers via WAF/CDN! https://radar.offseq.com/threat/cve-2026-22732-vulnerability-in-spring-spring-secu-2c8fbdd8 #OffSeq #SpringSecurity #CVE202622732
Aliyesha.comMar 17

EdDSA (Ed25519) JWT verification on Spring Boot 4 resource servers โ€” the missing pieces I had to stitch together.

https://aliyesha.com/sub/articles/programming/display/pr_jwt_eddsa_spring_boot_4_resource_server_support

#Spring #SpringSecurity #SpringBoot #SpringBoot4 #Java #EdDSA #Ed25519 #Security

Enjoy tracker free reading with us. #privacy #privacymatters

EdDSA (Ed25519) JWT verification on Spring Boot 4 resource servers โ€” the missing pieces I had to stitch together.

How to enable EdDSA/Ed25519 JWT verification on Spring Boot 4 resource servers by surgically patching Spring Security's three integration gaps using Boot 4's JwkSetUriJwtDecoderBuilderCustomizer hook.

Aliyesha
Aliyesha.comMar 15

EdDSA (Ed25519) JWT verification on Spring Boot 4 resource servers โ€” the missing pieces I had to stitch together.

https://aliyesha.com/sub/articles/programming/display/pr_jwt_eddsa_spring_boot_4_resource_server_support

#Spring #SpringSecurity #SpringBoot #SpringBoot4 #Java #EdDSA #Ed25519 #Security

Enjoy tracker free reading with us. #privacy #privacymatters

EdDSA (Ed25519) JWT verification on Spring Boot 4 resource servers โ€” the missing pieces I had to stitch together.

How to enable EdDSA/Ed25519 JWT verification on Spring Boot 4 resource servers by surgically patching Spring Security's three integration gaps using Boot 4's JwkSetUriJwtDecoderBuilderCustomizer hook.

Aliyesha
IAMDevBoxMar 2

Complete guide to configuring SAML SSO with Spring Security 6 โ€” metadata-location setup, multi-IdP support, custom attribute mapping, and troubleshooting signature validation errors. Companion repo with Docker Compose and Keycloak included.

https://iamdevbox.com/posts/configuring-saml-login-with-spring-security/?utm_source=mastodon&utm_medium=social&utm_campaign=blog_post

#springsecurity #saml #sso #springboot #java

Configuring SAML Login with Spring Security: metadata-location and Relying Party Setup

Complete guide to configuring SAML login with Spring Security โ€” including metadata-location setup, spring.security.saml2.relyingparty.registration configuration, certificate management, and troubleshooting common SAML errors.

IAMDevBox