Skip to content
OpenAdvisories

Vendor

pac4j

9 known vulnerabilities.

Products

pac4j 8 pac4j-jwt 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-29000 Public exploit

    pac4j-jwt JwtAuthenticator Authentication Bypass

    pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public ke…

    pac4j pac4j-jwt org.pac4j:pac4j-jwt Maven
  • Critical 9.2
    CVE-2023-25581 Public exploit

    Deserialization of untrusted data in InternalAttributeHandler in pac4j

    pac4j is a security framework for Java. `pac4j-core` prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects systems that store externally controlled values in attributes of the `UserProfile` class from pac4j-core…

    pac4j pac4j org.pac4j:pac4j-core Maven