com.buession.cas:cas-server-support-captcha (>=4.0.0, <=5.0.0), com.buession.cas:cas-server-support-captcha-core (4.0.0) +362 more potentially affected by CVE-2026-59099 via org.apereo.cas:cas-server-core-util-api (>=7.3.0, <=8.0.0-rc5)

org.apereo.cas:cas-server-core-util-api MAVEN version =7.3.0, =4.0.0, =4.0.0, =4.1.0-m0, =7.3.0, =7.3.0, =7.3.0, =7.3.0, =7.3.0, =8.0.0-rc5 and more Source cves: CVE-2026-59099 Source advisory: MEND:CVE-2026-59099...

CVE-2021-39227

ZRender is a lightweight graphic library providing 2d draw for Apache ECharts. In versions prior to 5.2.1, using merge and clone helper methods in the src/core/util.ts module results in prototype pollution. It affects the popular data visualization library Apache ECharts, which uses and exports...

CVE-2022-29773

An access control issue in aleksis/core/util/authhelpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set...

org.apereo.cas:cas-mgmt-api-configuration (>=6.1.0-rc2, <=6.1.0-rc4), org.apereo.cas:cas-mgmt-core-util (>=6.0.0-rc4, <=6.1.0-rc4) +197 more potentially affected by CVE-2019-10754 via org.apereo.cas:cas-server-core-services-api (>=6.0.0-rc4, <=6.1.0-rc4)

org.apereo.cas:cas-server-core-services-api MAVEN version =6.0.0-rc4, =6.1.0-rc2, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.0.0-rc4, =6.1.0-rc4 and more Source cves: CVE-2019-10754...