Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.pac4j:pac4j-oidc

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1
Registry
Maven Central

Advisories 1

  • If an OpenID Connect provider supports the "none" algorithm (i.e., tokens with no signature), pac4j v5.3.0 (and prior) does not refuse it…

    Affected: fixed in 4.5.5; from 5.0, fixed in 5.3.1.