{
  "from_raw": "Colm O hEigeartaigh <coheigea@apache.org>",
  "from": "Colm O hEigeartaigh <co...@apache.org>",
  "gravatar": "7760700ec800e9fa0453ac51f2db8802",
  "to": "an...@apache.org,\n de...@cxf.apache.org",
  "subject": "CVE-2026-50634: Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry",
  "message-id": "<2e3616df-1c00-4be9-5b01-06b2e6d179e0@apache.org>",
  "mid": "bf9w75mvw499pqlw1lsgcoq74wfrbyly",
  "permalinks": [
    "bf9w75mvw499pqlw1lsgcoq74wfrbyly",
    "r91f8d88dd5438a473011e80966f5a165ec2d349e73edbb55c70d5a36@<announce.apache.org>"
  ],
  "dbid": "ad3c0eeb0b343f9b185ce61143c2862eef640887b05c5878dc247c936b753781",
  "cc": "de...@cxf.apache.org",
  "epoch": 1781197547,
  "list": "<announce.apache.org>",
  "list_raw": "<announce.apache.org>",
  "date": "2026/06/11 17:05:47",
  "private": false,
  "references": "",
  "in-reply-to": "",
  "body": "Severity: important \n\nAffected versions:\n\n- Apache CXF (org.apache.cxf:cxf-rt-rs-security-jose-jaxrs) 4.2.0 before 4.2.2\n- Apache CXF (org.apache.cxf:cxf-rt-rs-security-jose-jaxrs) before 4.1.7\n\nDescription:\n\nA vulnerability in Apache CXF's\u00a0JwsJsonContainerRequestFilter can be exploited to cause\u00a0CXF to process metadata that was not authenticated by the accepted signature.\u00a0This can bypass the application's assumption\n\nthat accepted `Content-Type` or protected HTTP-header metadata came from a verified signature entry, and may steer downstream JAX-RS entity parsing or signed-header consistency checks. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fix this issue.\n\nCredit:\n\nMitchell Benjamin / Revamp Studio. (finder)\n\nReferences:\n\nhttps://cxf.apache.org/\nhttps://www.cve.org/CVERecord?id=CVE-2026-50634\n\n",
  "body_short": "Severity: important \n\nAffected versions:\n\n- Apache CXF (org.apache.cxf:cxf-rt-rs-security-jose-jaxrs) 4.2.0 before 4.2.2\n- Apache CXF (org.apache.cxf:cxf-rt-rs-security-jose-jaxrs) before 4.1.7\n\nDescri",
  "html_source_only": false,
  "attachments": [],
  "forum": "announce@apache.org",
  "size": 2833,
  "id": "bf9w75mvw499pqlw1lsgcoq74wfrbyly"
}