Skip to content
OpenAdvisories

Package · Maven

org.pac4j:pac4j-jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2026-29000 Public exploit

    pac4j-jwt JwtAuthenticator Authentication Bypass

    pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public ke…

    pac4j pac4j-jwt org.pac4j:pac4j-jwt Maven