ash_authentication_oauth2_server — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in ash_authentication_oauth2_server, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-82758	ash_authentication_oauth2_server treats an empty resolved secret as valid, opening the gated Dynamic Client Registration endpoint CWE-287	6.3	Medium	2026-09-07
CVE-2026-82757	ash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF CWE-918	6.3	Medium	2026-09-07
CVE-2026-82756	ash_authentication_oauth2_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injection CWE-116	6.3	Medium	2026-09-07
CVE-2026-82755	ash_authentication_oauth2_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion CWE-524	6.3	Medium	2026-09-07
CVE-2026-82754	ash_authentication_oauth2_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls CWE-424	6.3	Medium	2026-09-07
CVE-2026-82753	Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash_authentication_oauth2_server CWE-770	8.2	High	2026-09-07

All 6 known CVE vulnerabilities affecting ash_authentication_oauth2_server with full Chinese analysis, references, and POCs where available.