org.jasig.cas:cas-server-support-token (>=4.2.0-rc1, <=4.2.1), org.jasig.cas:cas-server-support-token-webflow (>=4.2.0-rc1, <=4.2.1) potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.8.2)

org.pac4j:pac4j-jwt MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.jasig.cas:cas-server-support-token =4.2.0-rc1, =4.2.0-rc1, =4.2.1 Source cves: CVE-2026-29000 Source advisory:...

org.jasig.cas:cas-server-support-token (>=4.2.5, <=4.2.7), org.jasig.cas:cas-server-support-token-webflow (>=4.2.5, <=4.2.7) potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.8.9)

org.pac4j:pac4j-jwt MAVEN version 1.8.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.jasig.cas:cas-server-support-token =4.2.5, =4.2.5, =4.2.7 Source cves: CVE-2026-29000 Source advisory:...

ba.sake:pac4j-testkit (>=0.1.0, <=0.2.0), com.github.hiwepy:pac4j-spring-boot-starter (3.3.x.20241020.release) +2 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=6.0.5, <=6.2.2)

org.pac4j:pac4j-jwt MAVEN version =6.0.5, =0.1.0, =7.1.0-rc6, =7.1.0-rc6, =7.3.4 Source cves: CVE-2026-29000 Source advisory: GHSA-PM7G-W2CF-Q238...