JanssenProject/jans

GitHub

github.com

docs.jans.io

Releases624

Frequency3 days 5 hours

Last Release 6 days ago

Stars632

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-54876 ↗	Aug 6, 2025Wednesday, 6 August 2025, 00:15	—	—
The Janssen Project is an open-source identity and access management (IAM) platform. In versions 1.9.0 and below, Janssen stores passwords in plaintext in the local cli_cmd.log file. This is fixed in the nightly prerelease.
CVE-2025-53003 ↗	Jul 1, 2025Tuesday, 1 July 2025, 02:15	—	—
The Janssen Project is an open-source identity and access management (IAM) platform. Prior to version 1.8.0, the Config API returns results without scope verification. This has a large internal surface attack area that exposes all sorts of information from the IDP including clients, users, scripts ..etc. This issue has been patched in version 1.8.0. A workaround for this vulnerability involves users forking and building the config api, patching it in their system following commit 92eea4d.