These libraries are upgraded to address CVE-2024-38820:
-
The
commons-lang3library is upgraded to version 3.20.0. -
The
mule-http-connectorlibrary is upgraded to version 1.10.6.
Support Category: Select
OAuth Module is an extension to hook OAuth2 to HTTP extension connectors.
Guide: OAuth Module User Guide
February 12, 2026
| Software | Version |
|---|---|
Mule |
4.1.1 and later |
OpenJDK |
8, 11, and 17 |
| Issue Resolution | ID |
|---|---|
These libraries are upgraded to address CVE-2024-38820:
|
W-19805507 |
September 8, 2025
| Software | Version |
|---|---|
Mule |
4.1.1 and later |
OpenJDK |
8, 11, and 17 |
| Issue Resolution | ID |
|---|---|
Dynamic HTTP requester configurations now properly handle the OAuth dancer lifecycle to prevent race conditions during configuration expiration. |
W-19449357 |
May 27, 2025
| Software | Version |
|---|---|
Mule |
4.1.1 and later |
OpenJDK |
8, 11, and 17 |
| Issue Resolution | ID |
|---|---|
The proxy now works as intended. |
W-18568237 |
May 8, 2025
| Software | Version |
|---|---|
Mule |
4.1.1 and later |
OpenJDK |
8, 11, and 17 |
| Issue Resolution | ID |
|---|---|
|
W-18230789 |
February 26, 2025
| Software | Version |
|---|---|
Mule |
4.1.1 and later |
OpenJDK |
8, 11, and 17 |
| Issue Resolution | ID |
|---|---|
The commons-io dependency is updated to fix the CVE-2024-47554 vulnerability. |
W-17412056 |
A ClassCastException is no longer thrown when using the OAuth Retrieve Access Token operation. |
W-15832018 |
December 15, 2023
This connector is now compatible with Java 17.
| Software | Version |
|---|---|
Mule |
4.1.1 and later |
OpenJDK |
8, 11, and 17 |
May 23, 2023
| Application/Service | Version |
|---|---|
Mule |
4.1.1 |
| Issue Resolution | ID |
|---|---|
The internal libraries are upgraded. |
W-11680326 |
The OAuth localCallbackConfig parameter is refactored to avoid different inconsistent behavior according to the configuration order. |
MULE-14827 |
September 13, 2022
| Application/Service | Version |
|---|---|
Mule |
4.1.1 |
| Issue | ID |
|---|---|
OAuth module now responds when Token URL fails more than three times. |
W-11680326 |
March 3, 2022
| Application/Service | Version |
|---|---|
Mule |
4.1.1 |
| Issue | ID |
|---|---|
Oauth token refresh issue no longer occurs in Mule 4.4.0. |
W-10781856 |