You are viewing a plain text version of this content. The canonical link for it is here.
- [jira] [Commented] (CXF-9218) Respect configured ProxySelector instead of hard-wiring system proxy properties - posted by "Matthias Pretzer (Jira)" <ji...@apache.org> on 2026/06/01 07:53:00 UTC, 0 replies.
- [jira] [Commented] (CXF-9111) Default behavior for "multipart/form-data" requests not standard-conform - posted by "Carsten Teich (Jira)" <ji...@apache.org> on 2026/06/01 12:25:00 UTC, 5 replies.
- [jira] [Resolved] (CXF-9213) RetryStrategy is a stateful class whose objects shouldn't be reused - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/03 00:46:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9035) Fix java.util.ConcurrentModificationException at org.apache.cxf.message.MessageImpl.calcContextCache - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/04 22:00:00 UTC, 1 replies.
- [jira] [Updated] (CXF-9061) Update documentation to use Jakarta namespaces as well (where appropriate) - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/04 22:02:00 UTC, 1 replies.
- [jira] [Updated] (CXF-9126) LEAKs reported when running cxf-systests-transport-netty with 'paranoid' detection level - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/04 22:03:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9072) NewCookieHeaderProvider does not support SameSite attribute on cookies - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/04 22:03:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9161) Some of the OIDCFlowTest fail with timeout (JPA only) when HttpClient instance is shared - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/04 22:04:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9109) MAX_PER_HOST_CONNECTIONS does not work - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/04 22:04:00 UTC, 0 replies.
- [jira] [Assigned] (CXF-8926) MTOM - Lock while processing attachment - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/09 22:35:00 UTC, 0 replies.
- [jira] [Commented] (CXF-8926) MTOM - Lock while processing attachment - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/09 22:54:00 UTC, 2 replies.
- [jira] [Updated] (CXF-8926) MTOM - Lock while processing attachment - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/09 22:55:00 UTC, 2 replies.
- [jira] [Created] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published - posted by "James Hutton (Jira)" <ji...@apache.org> on 2026/06/10 21:40:00 UTC, 0 replies.
- [jira] [Assigned] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published - posted by "Andriy Redko (Jira)" <ji...@apache.org> on 2026/06/10 22:34:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published - posted by "Andriy Redko (Jira)" <ji...@apache.org> on 2026/06/10 22:34:00 UTC, 0 replies.
- [jira] [Resolved] (CXF-9219) cxf-bom manages dependencies for 4.x that no longer exist or are not published - posted by "Andriy Redko (Jira)" <ji...@apache.org> on 2026/06/17 02:24:00 UTC, 0 replies.
- [jira] [Created] (CXF-9220) Remove Apache Derby since it is retired - posted by "Andriy Redko (Jira)" <ji...@apache.org> on 2026/06/17 02:38:00 UTC, 0 replies.
- [jira] [Created] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted - posted by "Guanping Zhang (Jira)" <ji...@apache.org> on 2026/06/19 07:24:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted - posted by "Guanping Zhang (Jira)" <ji...@apache.org> on 2026/06/19 07:28:00 UTC, 3 replies.
- [jira] [Created] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) - posted by "Guanping Zhang (Jira)" <ji...@apache.org> on 2026/06/19 07:30:00 UTC, 0 replies.
- [jira] [Created] (CXF-9223) completeAudienceMatch=false defaults to prefix matching for audience validation, widening resource access - posted by "Guanping Zhang (Jira)" <ji...@apache.org> on 2026/06/19 07:36:00 UTC, 0 replies.
- [jira] [Created] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks - posted by "Guanping Zhang (Jira)" <ji...@apache.org> on 2026/06/19 07:37:00 UTC, 0 replies.
- [jira] [Created] (CXF-9225) OIDC RP does not enforce nonce validation for Implicit/Hybrid flows - posted by "Guanping Zhang (Jira)" <ji...@apache.org> on 2026/06/19 07:39:00 UTC, 0 replies.
- [jira] [Comment Edited] (CXF-8926) MTOM - Lock while processing attachment - posted by "mircea (Jira)" <ji...@apache.org> on 2026/06/19 11:08:00 UTC, 2 replies.
- [jira] [Assigned] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted - posted by "Andriy Redko (Jira)" <ji...@apache.org> on 2026/06/20 16:22:00 UTC, 0 replies.
- [jira] [Assigned] (CXF-9224) Authorization responses omit RFC 9207 iss parameter, exposing clients to OAuth mix-up attacks - posted by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/06/24 13:27:00 UTC, 1 replies.
- [jira] [Resolved] (CXF-9221) JCache providers use inverted isExpired() logic causing expired tokens/codes to never be evicted - posted by "Andriy Redko (Jira)" <ji...@apache.org> on 2026/06/24 13:58:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) - posted by "Reto Weiss (Jira)" <ji...@apache.org> on 2026/06/25 06:42:00 UTC, 2 replies.
- [jira] [Created] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) - posted by "Reto Weiss (Jira)" <ji...@apache.org> on 2026/06/25 06:42:00 UTC, 0 replies.
- [jira] [Assigned] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/25 12:53:00 UTC, 0 replies.
- [jira] [Commented] (CXF-9226) Proxy authentication fails with IllegalStateException instead of HTTPException (407) - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/25 18:45:00 UTC, 1 replies.
- [jira] [Assigned] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) - posted by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/06/26 08:43:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) - posted by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/06/26 08:44:00 UTC, 0 replies.
- [jira] [Commented] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) - posted by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/06/26 08:58:00 UTC, 0 replies.
- [jira] [Assigned] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/26 13:53:00 UTC, 0 replies.
- [jira] [Created] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/26 13:53:00 UTC, 0 replies.
- [jira] [Updated] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements - posted by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/06/26 13:54:00 UTC, 0 replies.
- [jira] [Resolved] (CXF-9222) partialMatchScopeValidation allows prefix-based scope escalation (e.g., read grants readwrite) - posted by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/06/26 15:21:00 UTC, 0 replies.
- [jira] [Commented] (CXF-9227) CXF 4.1.7 regression: more SecurityManager permission requirements - posted by "Fabio Burzigotti (Jira)" <ji...@apache.org> on 2026/06/26 15:44:00 UTC, 2 replies.