com.pig4cloud/pig vulnerabilities

Latest com.pig4cloud/pig CVEs

Newest publication first

1. CVE-2026-125377 Pig before 4.1.2 Missing Authorization Exposes OAuth2 Client Secrets via /client

   Published 2026-11-09

   High·CVSS 7.1 EPSS 0.33%

   Pig before 4.1.2 contains a missing authorization vulnerability in SysClientController that allows authenticated users without client-management permission to retrieve OAuth2 client secrets via GET /client/{clientId} and GET /client/export. Attackers can fetch clientSecret values...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.