Skip to content
OpenAdvisories

Product · pac4j

pac4j-jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-29000 Public exploit

    pac4j-jwt JwtAuthenticator Authentication Bypass

    pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public ke…

    pac4j pac4j-jwt org.pac4j:pac4j-jwt Maven