io.buji:buji-pac4j (5.0.1), io.jooby:jooby-pac4j (2.8.4) +346 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.0.1)

org.pac4j:pac4j-core MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 5.0.1 - io.jooby:jooby-pac4j 2.8.4 - org.apereo.cas:cas-server-core 6.2.0-rc5 -...

io.buji:buji-pac4j (>=2.0.0, <=2.0.1), net.binggl:ninja-google-oauth-module (1.0.5) +97 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.9.1)

org.pac4j:pac4j-core MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j =2.0.0, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3, =5.0.0.m3,...

io.buji:buji-pac4j (2.2.0), org.apereo.cas:cas-management-webapp (>=5.0.6, <=5.0.10) +97 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.9.7)

org.pac4j:pac4j-core MAVEN version 1.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 2.2.0 - org.apereo.cas:cas-management-webapp =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6, =5.0.6,...