Skip to content
OpenAdvisories

Package · Maven

org.pac4j:pac4j-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-40458

    Cross-Site Request Forgery in PAC4J

    PAC4J is vulnerable to Cross-Site Request Forgery (CSRF). A malicious attacker can craft a specially designed website which, when visited by a user, will automatically submit a forged cross-site request with a token whose hash collides with the victim's legit…

    pac4j pac4j druid org.pac4j:pac4j-core Wolfi Maven