Vulnerabilities in PAC4J
9 resultsCVE-2026-29000CRITICALpac4j-jwt JwtAuthenticator Authentication BypassEPSS 6.1%CVE-2023-25581CRITICALDeserialization of untrusted data in InternalAttributeHandler in pac4jEPSS 1.9%CVE-2026-40459HIGHLDAP Injection in PAC4JEPSS 0.6%CVE-2026-82463HIGHpac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type CheckEPSS 0.6%CVE-2026-82464MEDIUMpac4j-core before 6.5.6 Open Redirect via Backslash LogoutEPSS 0.3%CVE-2026-82461HIGHpac4j-oidc before 6.5.6 Privilege Escalation via Unverified Keycloak Access TokenEPSS 0.3%CVE-2026-82465MEDIUMpac4j-saml before 6.5.6 Session Destruction via Unsigned LogoutRequestEPSS 0.3%CVE-2026-82462MEDIUMpac4j-oidc before 6.5.6 Authentication Bypass via Access Token SubstitutionEPSS 0.2%CVE-2026-40458HIGHCross-Site Request Forgery in PAC4JEPSS 0.2%