{"id":"GHSA-j5gq-897m-2rff","summary":"Race condition in the Okta Java SDK","details":"### Description\nIn the Okta Java SDK, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response.\n\n\n### Affected product and versions\nYou may be affected if you meet the following preconditions:\n- Using the Okta Java SDK between versions 11.0.0 and 20.0.0, and\n- Implementing a multithreaded application with the ApiClient class where the response status code is used in access control flows\n\n### Resolution\nUpgrade Okta/okta-sdk-java to versions 21.0.0  or greater.","aliases":["CVE-2025-67505"],"modified":"2025-12-10T21:56:16.380140Z","published":"2025-12-10T21:31:52Z","database_specific":{"github_reviewed_at":"2025-12-10T21:31:52Z","nvd_published_at":null,"cwe_ids":["CWE-362"],"severity":"HIGH","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/okta/okta-sdk-java/security/advisories/GHSA-j5gq-897m-2rff"},{"type":"WEB","url":"https://github.com/okta/okta-sdk-java/commit/abf4f128a0441f90cb7efcdcf4bde1aef8703243"},{"type":"PACKAGE","url":"https://github.com/okta/okta-sdk-java"}],"affected":[{"package":{"name":"com.okta.sdk:okta-sdk-root","ecosystem":"Maven","purl":"pkg:maven/com.okta.sdk/okta-sdk-root"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.0"},{"fixed":"20.0.1"}]}],"versions":["11.0.0","11.0.2","11.0.3","12.0.0","12.0.1","12.0.2","13.0.0","13.0.1","13.0.2","13.0.3","14.0.0","15.0.0","16.0.0","17.0.0","18.0.0","19.0.0","19.0.1","20.0.0"],"database_specific":{"last_known_affected_version_range":"\u003c= 20.0.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/12/GHSA-j5gq-897m-2rff/GHSA-j5gq-897m-2rff.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L"}]}