jans vulnerabilities

1 known vulnerability in jans from JanssenProject. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  jans: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-53003Jul 1, 2025JanssenProject

  The Janssen Project is an open-source identity and access management (IAM) platform. Prior to version 1.8.0, the Config API returns results without scope verification. This has a large internal surface attack area that exposes all sorts of information from the