Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
Open Identity Platform OpenAM 14.x.x	✅
Forgerock OpenAM 13.х.x	❌ upgrade to Open Identity Platform OpenAM
Forgerock OpenAM 12.х.x	❌ upgrade to Open Identity Platform OpenAM
Forgerock OpenAM 11.х.x	❌ upgrade to Open Identity Platform OpenAM
Sun/Oracle OpenSSO 10.х.x	❌ upgrade to Open Identity Platform OpenAM

Reporting a Vulnerability

Please create issue https://github.com/OpenIdentityPlatform/OpenAM/issues/new?template=Bug_report.md

OpenAM FreeMarker template injection
GHSA-7726-43hg-m23v published Jul 24, 2024 by vharseko

High
User impersonation using SAMLv1.x SSO process.
GHSA-4mh8-9wq6-rjxg published Jul 20, 2023 by maximthomas

Critical

Learn more about advisories related to OpenIdentityPlatform/OpenAM in the GitHub Advisory Database