com.buession.cas:buession-cas-audit (2.0.0), com.buession.cas:buession-cas-captcha (2.0.0) +26 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.5.4)

org.pac4j:pac4j-core MAVEN version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.buession.cas:buession-cas-audit 2.0.0 - com.buession.cas:buession-cas-captcha 2.0.0 -...

ai.tock:bot-test (>=22.9.0, <=24.9.8), ai.tock:bot-test-base (>=22.9.0, <=24.9.8) +484 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (>=5.0.0-rc1, <=5.7.9)

org.pac4j:pac4j-core MAVEN version =5.0.0-rc1, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =23.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =22.9.0, =24.9.8 and more Source cves: CVE-2026-40458 Source advisory: GHSA-XW5C-JC7X-GF75...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc1), org.apereo.cas:cas-management-webapp-support-ldap (>=5.2.1, <=5.3.0-rc1) +226 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (2.2.0)

org.pac4j:pac4j-core MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc1 - org.apereo.cas:cas-management-webapp-support-ldap =5.2.1,...

io.buji:buji-pac4j-core (1.4.1), io.buji:buji-pac4j-servlet (1.4.1) +14 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.4)

org.pac4j:pac4j-core MAVEN version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j-core 1.4.1 - io.buji:buji-pac4j-servlet 1.4.1 - org.pac4j:pac4j-cas 1.8.4 - org.pac4j:pac4j-config...

com.github.grooviter:gql-ratpack (>=0.5.0, <=1.1.0), io.ratpack:ratpack-pac4j (>=1.4.0-rc-1, <=1.10.0-milestone-40) +143 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.8)

org.pac4j:pac4j-core MAVEN version 1.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.github.grooviter:gql-ratpack =0.5.0, =1.4.0-rc-1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1, =5.0.0.m1,...

cn.jbone:jbone-errors (1.0.0), net.binggl:ninja-google-oauth-module (1.0.7) +219 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (2.3.1)

org.pac4j:pac4j-core MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - cn.jbone:jbone-errors 1.0.0 - net.binggl:ninja-google-oauth-module 1.0.7 -...

org.pac4j:pac4j-cas (4.5.9), org.pac4j:pac4j-config (4.5.9) +11 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.5.9)

org.pac4j:pac4j-core MAVEN version 4.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 4.5.9 - org.pac4j:pac4j-config 4.5.9 - org.pac4j:pac4j-couch 4.5.9 - org.pac4j:pac4j-gae 4.5.9 -...

com.baomidou:shaun-core (1.2), com.baomidou:shaun-spring-boot-starter (1.2) +376 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.5.0)

org.pac4j:pac4j-core MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.baomidou:shaun-core 1.2 - com.baomidou:shaun-spring-boot-starter 1.2 - com.baomidou:shaun-togglz 1.2 -...

org.jasig.cas:cas-management-webapp (>=4.2.0-rc1, <=4.2.1), org.jasig.cas:cas-management-webapp-support (>=4.2.0-rc1, <=4.2.1) +65 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.2)

org.pac4j:pac4j-core MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.jasig.cas:cas-management-webapp =4.2.0-rc1, =4.2.0-rc1, =4.2.0-rc1, =4.2.0-rc1, =4.2.0-rc3, =4.2.0-rc1, =4.2.0-rc1,...

com.jetdrone:yoke.middleware.pac4j (>=2.0.1, <=2.0.21), io.buji:buji-pac4j (1.2.3) +11 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.5.1)

org.pac4j:pac4j-core MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.jetdrone:yoke.middleware.pac4j =2.0.1, =0.9.5, =0.9.11 - org.pac4j:j2e-pac4j 1.0.3 - org.pac4j:pac4j-cas 1.5.1 -...

org.apereo.cas:cas-management-webapp-support (5.1.0-rc4), org.apereo.cas:cas-management-webapp-support-ldap (5.1.0-rc4) +140 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (2.0.0-rc2)

org.pac4j:pac4j-core MAVEN version 2.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.1.0-rc4 - org.apereo.cas:cas-management-webapp-support-ldap 5.1.0-rc...

org.apereo.cas:cas-management-webapp (>=5.0.3, <=5.0.5), org.apereo.cas:cas-management-webapp-support (>=5.0.3, <=5.0.5) +98 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.6)

org.pac4j:pac4j-core MAVEN version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3,...

io.buji:buji-pac4j (2.2.0), org.apereo.cas:cas-management-webapp (>=5.0.6, <=5.0.10) +97 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.7)

org.pac4j:pac4j-core MAVEN version 1.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 2.2.0 - org.apereo.cas:cas-management-webapp =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6,...

io.buji:buji-pac4j-core (1.4.0), io.buji:buji-pac4j-servlet (1.4.0) +19 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.1)

org.pac4j:pac4j-core MAVEN version 1.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j-core 1.4.0 - io.buji:buji-pac4j-servlet 1.4.0 - org.apache.knox:gateway-provider-security-pac4j...

org.apereo.cas:cas-management-webapp-configuration (5.3.3), org.apereo.cas:cas-server-core (5.3.3) +246 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.1.0)

org.pac4j:pac4j-core MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.3 - org.apereo.cas:cas-server-core 5.3.3 -...

com.buession.security:buession-security-pac4j (>=1.2.1, <=1.2.2), com.buession.springboot:buession-springboot-cas (>=1.2.1, <=1.2.2) +24 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.4.0)

org.pac4j:pac4j-core MAVEN version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.buession.security:buession-security-pac4j =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.0.1.release, =0.7.0, =2.9.6,...

com.agifac.lib:app-framework (>=12.1.0, <=16.0.4), com.agifac.lib:maf-defaultplugins-extension (>=12.1.1, <=16.0.4) +37 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.7.0)

org.pac4j:pac4j-core MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.agifac.lib:app-framework =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =16.1.0, =16.1.0, =16.1.0, =16.1.0, =16.1.0,...

org.pac4j.jax-rs:core (>=3.0.1, <=3.0.2), org.pac4j.jax-rs:testing (>=3.0.1, <=3.0.2) +18 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.8.2)

org.pac4j:pac4j-core MAVEN version 3.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j.jax-rs:core =3.0.1, =3.0.1, =3.0.1, =3.0.1, =3.0.2 - org.pac4j:jersey228-pac4j 3.0.2 - org.pac4j:pac4j-cas...

io.buji:buji-pac4j (1.2.0), org.jasig.cas:cas-server-support-pac4j (4.0.0-rc1) +8 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.4.0)

org.pac4j:pac4j-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 1.2.0 - org.jasig.cas:cas-server-support-pac4j 4.0.0-rc1 - org.pac4j:j2e-pac4j 1.0.0 -...

com.idc.webchannel.pac4j:pac4j-saml-config-db (1.9.0), io.buji:buji-pac4j (2.1.0-rc1) +19 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.5)

org.pac4j:pac4j-core MAVEN version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.idc.webchannel.pac4j:pac4j-saml-config-db 1.9.0 - io.buji:buji-pac4j 2.1.0-rc1 - org.jooby:coverage-report 1.1.2 -...