ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.baomidou:shaun-core (2.0.0) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.3, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.3, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: SNYK:JAVA-ORGPAC4J-15428218...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.baomidou:shaun-core (2.0.0) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.3, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.3, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: MEND:CVE-2026-29000...

EUVD-2022-6261

Malicious code in bioql PyPI...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

Cross site request forgery (csrf)

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191: Cross-Site Request Forgery (CSRF)

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The console in Togglz before 2.9.4 allows CSRF...

CVE-2020-28191

The CVE-2020-28191 entry concerns Togglz’s console vulnerability: CSRF in Togglz prior to version 2.9.4. The affected component is the Togglz console; root cause is lack of CSRF protection in the console workflow, enabling cross-site request forgery. The impact is high (as per CVSS 3.1: HIGH/CRIT...

Togglz Cross-Site Request Forgery Vulnerability

Togglz is a Java implementation of the Feature Toggles pattern from the Togglz open source. A security vulnerability exists in versions of Togglz prior to 2.9.4 , which stems from a vulnerability in its console that allows an attacker to achieve cross-site request forgery...

org.togglz:togglz-console-spring-boot-starter (0.0.1) potentially affected by CVE-2020-28191 via org.togglz:togglz-console (0.0.1)

org.togglz:togglz-console MAVEN version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.togglz:togglz-console and may be impacted: - org.togglz:togglz-console-spring-boot-starter 0.0.1 Source cves: CVE-2020-28191 Source advisory:...

GHSA-697V-PXG3-J262 Togglz console missing cross-site request forgery (CSRF) protection

Togglz is an implementation of the Feature Toggles pattern for Java. There is no CSRF protection in the togglz console and could allow an attacker to guess the CSRF token value. Version 2.9.4 adds the necessary CSRF protection...

Togglz console missing cross-site request forgery (CSRF) protection

Togglz is an implementation of the Feature Toggles pattern for Java. There is no CSRF protection in the togglz console and could allow an attacker to guess the CSRF token value. Version 2.9.4 adds the necessary CSRF protection...

com.breuninger.boot:spring-boot-starter-breuninger-togglz (>=2.0.0, <=2.0.5.release), com.oneops:secrets-proxy (>=1.2.0, <=1.5.0) +14 more potentially affected by CVE-2020-28191 via org.togglz:togglz-console (>=2.0.1.final, <=2.8.0)

org.togglz:togglz-console MAVEN version =2.0.1.final, =2.0.0, =1.2.0, =1.1, =1.0, =0.29.0, =2.1.0, =0.45.0, =0.45.0, =0.45.0, =0.8.0, =0.19.0, =0.8.0, =1.9.0, =1.17.0 - org.openlmis:openlmis-dhis2-integration 1.2.1 - org.openlmis:openlmis-referencedata 15.7.1 and more Source cves: CVE-2020-28191...

PT-2022-8883 · Togglz · Togglz

Name of the Vulnerable Software and Affected Versions: Togglz versions prior to 2.9.4 Description: The issue concerns the lack of CSRF protection in the Togglz console, which could allow an attacker to guess the CSRF token value. This lack of protection makes the console susceptible to Cross-Site...