All issues

Search results

Bundled tomcat-embed-core has 3 known CRITICAL CVEs (auth bypass) in v4.2.0

Status: Open.

#509 In swiyu-admin-ch/swiyu-issuer;

· dugajic-cpu opened on Sep 16, 2026

Payload Encryption does not provide sufficient protection against token theft

Status: Open.

KnownIssue

#434 In swiyu-admin-ch/swiyu-issuer;

· andre-kunz opened on Jul 6, 2026

Attackable Management Endpoints of the Generic Issuer & Verifier

Status: Open.

KnownIssue

#433 In swiyu-admin-ch/swiyu-issuer;

· andre-kunz opened on Jul 6, 2026

SSRF Possible to outside our Registries

Status: Open.

KnownIssue

#393 In swiyu-admin-ch/swiyu-issuer;

· andre-kunz opened on Jun 4, 2026

EMC-Contract: Remove support for vc+sd-jwt format

Status: Open.

#324 In swiyu-admin-ch/swiyu-issuer;

· andre-kunz opened on Apr 15, 2026

Security improvement: Add container configuration to enable or disable the swagger UI and apply full security headers

Status: Open.

#51 In swiyu-admin-ch/swiyu-issuer;

· damienbod opened on Jul 22, 2025

Implement "sub" value according to the interoperability profile [SYS-647]

Status: Open.

KnownIssue

#44 In swiyu-admin-ch/swiyu-issuer;

· andre-kunz opened on Jul 11, 2025

Error thrown on valid transition [SYS-642]

Status: Open.

KnownIssue

#53 In swiyu-admin-ch/swiyu-issuer;

· andre-kunz opened on Jul 10, 2025

Possible Man-in-the-Middle attack during credential issuance [SYS-734]

Status: Open.

KnownIssue

#46 In swiyu-admin-ch/swiyu-issuer;

· andre-kunz opened on Jul 10, 2025

Docs and security architecture for management APIs application security

Status: Open.

#137 In swiyu-admin-ch/swiyu-issuer;

· damienbod opened on Jul 5, 2025