<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">A security flaw in MITREid Connect was patched in the latest versions, 1.1.11 and 1.0.19 (as well as the main development trunk). With this bug, an attacker could bypass authentication
for clients registered using the "private_key_jwt" authentication mechanism, allowing for impersonation of these clients. The new version closes this hole, and it is strongly recommended that all implementations using "private_key_jwt" clients upgrade immediately.<br>
<br>
-- Justin<br>
</div>
</body>
</html>