Skip to content
OpenAdvisories

Package · Maven

org.pac4j:pac4j-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.0
    CVE-2026-40458

    Cross-Site Request Forgery in PAC4J

    PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site request with a token whose hash collides with the victim's legit…

    pac4j pac4j druid org.pac4j:pac4j-core Wolfi Maven
  • Critical 9.2
    CVE-2023-25581 Public exploit

    Deserialization of untrusted data in InternalAttributeHandler in pac4j

    pac4j is a security framework for Java. `pac4j-core` prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects systems that store externally controlled values in attributes of the `UserProfile` class from pac4j-core…

    pac4j pac4j org.pac4j:pac4j-core Maven