org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40985 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

org.apereo.cas:cas-server-core (>=8.0.0-rc1, <=8.0.0-rc5), org.apereo.cas:cas-server-core-api (>=8.0.0-rc1, <=8.0.0-rc5) +342 more potentially affected by CVE-2026-40986 via org.springframework.webflow:spring-webflow (4.0.0)

org.springframework.webflow:spring-webflow MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.webflow:spring-webflow and may be impacted: - org.apereo.cas:cas-server-core =8.0.0-rc1, =8.0.0-rc1, =8.0.0-rc1,...

org.apereo.cas:cas-server-core-api (>=5.3.7, <=5.3.16), org.apereo.cas:cas-server-core-api-authentication (>=5.3.7, <=5.3.16) +28 more potentially affected by CVE-2026-41838 via org.springframework:spring-websocket (4.3.21.release)

org.springframework:spring-websocket MAVEN version 4.3.21.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-websocket and may be impacted: - org.apereo.cas:cas-server-core-api =5.3.7, =5.3.7, =5.3.7, =5.3.7, =5.3.7,...

org.apereo.cas:cas-management-webapp (>=5.0.0.m1, <=5.0.0.m2), org.apereo.cas:cas-management-webapp-support (>=5.0.0.m1, <=5.0.0.m2) +85 more potentially affected by CVE-2026-40982 via org.springframework.cloud:spring-cloud-config-server (1.1.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.m1,...

org.apereo.cas:cas-management-webapp-configuration (5.3.3), org.apereo.cas:cas-server-core (5.3.3) +246 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.1.0)

org.pac4j:pac4j-core MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.3 - org.apereo.cas:cas-server-core 5.3.3 -...

com.idc.webchannel.pac4j:pac4j-saml-config-db (2.0.0), org.apereo.cas:cas-management-webapp-support (>=5.1.0, <=5.2.0-rc1) +156 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (2.0.0)

org.pac4j:pac4j-core MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.idc.webchannel.pac4j:pac4j-saml-config-db 2.0.0 - org.apereo.cas:cas-management-webapp-support =5.1.0, =5.1.0,...

org.apereo.cas:cas-management-webapp-configuration (5.3.1), org.apereo.cas:cas-management-webapp-support (>=5.3.1, <=5.3.3) +247 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.0.1)

org.pac4j:pac4j-core MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.1 - org.apereo.cas:cas-management-webapp-support =5.3.1, =5.3.1,...

io.buji:buji-pac4j (2.0.2), org.apereo.cas:cas-management-webapp (5.0.0.rc3) +104 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.2)

org.pac4j:pac4j-core MAVEN version 1.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j 2.0.2 - org.apereo.cas:cas-management-webapp 5.0.0.rc3 - org.apereo.cas:cas-management-webapp-suppor...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc1), org.apereo.cas:cas-management-webapp-support-ldap (>=5.2.1, <=5.3.0-rc1) +226 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (2.2.0)

org.pac4j:pac4j-core MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc1 - org.apereo.cas:cas-management-webapp-support-ldap =5.2.1,...

org.apereo.cas:cas-server-support-configuration-cloud-amqp (>=6.0.1, <=6.1.0-rc2), org.apereo.cas:cas-server-webapp-config-server (>=6.0.1, <=6.1.0-rc1) +10 more potentially affected by CVE-2026-22739 via org.springframework.cloud:spring-cloud-config-server (2.1.0.release)

org.springframework.cloud:spring-cloud-config-server MAVEN version 2.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-config-server and may be impacted: -...

org.apereo.cas:cas-management-webapp (5.0.0.rc1), org.apereo.cas:cas-management-webapp-support (>=5.0.0.m3, <=5.0.0.rc1) +77 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.9.1)

org.pac4j:pac4j-jwt MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp 5.0.0.rc1 - org.apereo.cas:cas-management-webapp-support =5.0.0.m3, =5.0.0.m3,...

org.apereo.cas:cas-management-webapp (>=5.0.0.rc4, <=5.0.2), org.apereo.cas:cas-management-webapp-support (>=5.0.0.rc4, <=5.0.2) +83 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.9.4)

org.pac4j:pac4j-jwt MAVEN version 1.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4, =5.0.0.rc4,...

org.apereo.cas:cas-management-webapp-support (>=5.1.0, <=5.2.0-rc1), org.apereo.cas:cas-management-webapp-support-ldap (>=5.1.0, <=5.2.0-rc1) +134 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (2.0.0)

org.pac4j:pac4j-jwt MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp-support =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0,...

org.apereo.cas:cas-management-webapp-support (5.2.0-rc2), org.apereo.cas:cas-management-webapp-support-ldap (>=5.2.0-rc2, <=5.2.0) +199 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (2.1.0)

org.pac4j:pac4j-jwt MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.2.0-rc2 - org.apereo.cas:cas-management-webapp-support-ldap =5.2.0-rc2,...

org.apereo.cas:cas-management-webapp-support (5.3.0-rc1), org.apereo.cas:cas-management-webapp-support-ldap (>=5.2.1, <=5.3.0-rc1) +210 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (2.2.0)

org.pac4j:pac4j-jwt MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp-support 5.3.0-rc1 - org.apereo.cas:cas-management-webapp-support-ldap =5.2.1, =5.2.1...

org.apereo.cas:cas-server-core (5.3.0-rc4), org.apereo.cas:cas-server-core-api-audit (5.3.0-rc4) +225 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.0.0-rc2)

org.pac4j:pac4j-jwt MAVEN version 3.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-server-core 5.3.0-rc4 - org.apereo.cas:cas-server-core-api-audit 5.3.0-rc4 -...

org.apereo.cas:cas-management-webapp-configuration (5.3.3), org.apereo.cas:cas-management-webapp-support (5.3.3) +232 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.1.0)

org.pac4j:pac4j-jwt MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp-configuration 5.3.3 - org.apereo.cas:cas-management-webapp-support 5.3.3 -...

org.apereo.cas:cas-management-webapp (>=5.0.3, <=5.0.5), org.apereo.cas:cas-management-webapp-support (>=5.0.3, <=5.0.5) +83 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (1.9.6)

org.pac4j:pac4j-jwt MAVEN version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - org.apereo.cas:cas-management-webapp =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3, =5.0.3,...