Package Health/org.openidentityplatform.openam:openam-core

openam-core

The package has a small runtime dependency surface and a substantial compiled artifact. Repository-level maintenance and licensing could not be verified from the collected Maven metadata.

Latest 16.1.2org.openidentityplatform.openam

Maven

82%

Total Score

Dependencies

100

Maturity

100

Supply Chain

100

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

All health scores are okay.

Vulnerabilities

Title	Versions	Severity
CVE-2026-53660 org.openidentityplatform.openam:openam-core is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag in versions 0.0.0 - 16.1.1.	0.0.0 - 16.1.1	High
AIKIDO-2026-238020 openam-core is vulnerable to LDAP Injection in versions 0.0.1 - 16.1.1.	0.0.1 - 16.1.1	High
AIKIDO-2026-50354 openam-core is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.1 - 16.1.1.	0.0.1 - 16.1.1	High
CVE-2026-62379 org.openidentityplatform.openam:openam-core is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 0.0.0 - 16.1.1.	0.0.0 - 16.1.1	Critical
CVE-2026-45048 org.openidentityplatform.openam:openam-core is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 16.0.6.	0.0.0 - 16.0.6	High

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
org.openidentityplatform.openam:openam-license-servlet Version *	—	—
org.openidentityplatform.openam:openam-shared Version *	—	—
org.openidentityplatform.openam:openam-audit-context Version *	—	—
org.openidentityplatform.openam:openam-audit-core Version *	—	—
org.openidentityplatform.openam:openam-coretoken Version *	—	—