OpenAM UI JS SDK #941

Draft

maximthomas wants to merge 41 commits intoOpenIdentityPlatform:masterfrom

maximthomas:openam-js-sdk

Commits on Nov 26, 2025

OpenAM UI JS SDK initial commit
maximthomas
committed

Commits on Nov 27, 2025

Commits on Dec 1, 2025

add save password function to the default user form
maximthomas
committed

Commits on Mar 30, 2026

Apply suggestions from code review

maximthomas
and
Copilot
authored
CVE-2025-66453 Rhino has high CPU usage and potential DoS (#943)

dependabot[bot]
authored and
maximthomas
committed
Update org.openidentityplatform.opendj to 5.0.2 (#940)

vharseko
authored and
maximthomas
committed
CVE-2025-64718 js-yaml has prototype pollution in merge (<<)
maximthomas
committed
CVE-2025-12183 CVE-2025-66566 LZ4 vulnerabilities (#946)
maximthomas
committed
Docs: set supported Java and Tomcat versions (#944)
maximthomas
committed
[maven-release-plugin] prepare release 16.0.4

Open Identity Platform Community
authored and
maximthomas
committed
[maven-release-plugin] prepare for next development iteration

Open Identity Platform Community
authored and
maximthomas
committed
fix javadoc build (#948)
maximthomas
committed
CVE-2025-67735 Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder (#949)

dependabot[bot]
authored and
maximthomas
committed
CVE-2025-15284 qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion (#950)

dependabot[bot]
authored and
maximthomas
committed
[#951] Set explicit xmlsec dependency for openam-federation-library (#952)
maximthomas
committed
CVE-2025-13465 Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions (#953)

dependabot[bot]
authored and
maximthomas
committed
CVE-2025-13465 Lodash versions 4.0.0 through 4.17.22 are vulnerable to prototype pollution in the _.unset and _.omit functions. (#954)
maximthomas
committed
[#955] Update JSTL to Jakarta 2.0.0 version (#957)
maximthomas
committed
[#956] Add OpenAM secondary instances to the Docker test in build.yml (#959)

maximthomas
and
vharseko
committed
Update org.openidentityplatform.opendj to 5.0.3 (#947)

vharseko
authored and
maximthomas
committed
[maven-release-plugin] prepare release 16.0.5

Open Identity Platform Community
authored and
maximthomas
committed
[maven-release-plugin] prepare for next development iteration

Open Identity Platform Community
authored and
maximthomas
committed
CVE-2026-2391 qs's arrayLimit bypass in comma parsing allows denial of service (#960)

dependabot[bot]
authored and
maximthomas
committed
CVE-2026-32141 CVE-2026-33228 flatted vulnerable to unbounded recursion DoS in parse() + Prototype Pollution via parse() in NodeJS flatted (#966)

dependabot[bot]
authored and
maximthomas
committed
CVE-2026-33439 Pre-Authentication Remote Code Execution via jato.clientSession Deserialization in OpenAM
maximthomas
committed
Update opendj.version to 5.0.4 (#964)

vharseko
authored and
maximthomas
committed
[maven-release-plugin] prepare release 16.0.6

Open Identity Platform Community
authored and
maximthomas
committed
[maven-release-plugin] prepare for next development iteration

Open Identity Platform Community
authored and
maximthomas
committed
Update build.yml add JDK 26 support (#967)

vharseko
authored and
maximthomas
committed
CVE-2026-33672 CVE-2026-33671: Method injection in POSIX character classes causes incorrect glob matching Related glob security issue patched in the same release (#970)

authored and
maximthomas
committed
CVE-2026-33870 Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing (#972)

dependabot[bot]
authored and
maximthomas
committed
disable resource filtering for openam-ui-js-sdk
maximthomas
committed
add missing copyright
maximthomas
committed
process response errors for userService
maximthomas
committed
Merge remote-tracking branch 'origin/master' into openam-js-sdk
maximthomas
committed
Apply suggestions from code review

maximthomas
and
Copilot
authored
update parent pom version
maximthomas
committed

Commits on Mar 31, 2026