Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver

{
                    "vendor": "Red Hat",
                    "product": "Red Hat build of Quarkus 3.27.5.SP2",
                    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
                    "defaultStatus": "unaffected",
                    "packageName": "quarkus-smallrye-jwt",
                    "cpes": [
                        "cpe:/a:redhat:quarkus:3.27::el8"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat build of Quarkus 3.33.3.SP2",
                    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
                    "defaultStatus": "unaffected",
                    "packageName": "quarkus-smallrye-jwt",
                    "cpes": [
                        "cpe:/a:redhat:quarkus:3.33::el8"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Exploit Intelligence",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "exploit-intelligence/agent-client-rhel9",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:exploit_intelligence:0"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat build of Apicurio Registry 3",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "quarkus-smallrye-jwt",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:apicurio_registry:3"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat build of Apicurio Registry 3",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "smallrye-jwt",
                    "defaultStatus": "unknown",
                    "cpes": [
                        "cpe:/a:redhat:apicurio_registry:3"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat build of Quarkus",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "smallrye-jwt",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:quarkus:3"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat JBoss Enterprise Application Platform 8",
                    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
                    "packageName": "smallrye-jwt",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:jboss_enterprise_application_platform:8"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat JBoss Enterprise Application Platform Expansion Pack",
                    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
                    "packageName": "smallrye-jwt",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:jbosseapxp"
                    ]
                }