Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.pac4j:pac4j-core

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 1 critical, 1 high
Dependents
490
Registry
Maven Central

Advisories 2

  • Cross-Site Request Forgery in PAC4J

    Affected: fixed in 5.7.10; from 6.0.0-RC1, fixed in 6.4.1.

  • CVE-2023-25581Critical 9.2

    Deserialization of untrusted data in InternalAttributeHandler in pac4j

    Affected: fixed in 4.0.0.