org.pac4j:pac4j-cas (4.5.10), org.pac4j:pac4j-config (4.5.10) +11 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.5.10)

org.pac4j:pac4j-core MAVEN version 4.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 4.5.10 - org.pac4j:pac4j-config 4.5.10 - org.pac4j:pac4j-couch 4.5.10 - org.pac4j:pac4j-gae 4.5.10...

org.pac4j:pac4j-cas (1.9.8), org.pac4j:pac4j-config (1.9.8) +11 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.8)

org.pac4j:pac4j-core MAVEN version 1.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 1.9.8 - org.pac4j:pac4j-config 1.9.8 - org.pac4j:pac4j-gae 1.9.8 - org.pac4j:pac4j-http 1.9.8 -...

com.yahoo.sherlock:sherlock (>=1.11, <=1.13), org.pac4j:pac4j-cas (3.2.0) +18 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.2.0)

org.pac4j:pac4j-core MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.yahoo.sherlock:sherlock =1.11, =1.13 - org.pac4j:pac4j-cas 3.2.0 - org.pac4j:pac4j-config 3.2.0 -...

org.pac4j:pac4j-cas (3.8.0), org.pac4j:pac4j-config (3.8.0) +11 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.8.0)

org.pac4j:pac4j-core MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 3.8.0 - org.pac4j:pac4j-config 3.8.0 - org.pac4j:pac4j-couch 3.8.0 - org.pac4j:pac4j-gae 3.8.0 -...

org.pac4j:pac4j-cas (1.8.3), org.pac4j:pac4j-config (1.8.3) +15 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.3)

org.pac4j:pac4j-core MAVEN version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 1.8.3 - org.pac4j:pac4j-config 1.8.3 - org.pac4j:pac4j-gae 1.8.3 - org.pac4j:pac4j-http 1.8.3 -...

com.efluid.oss:efluid-datagate-app (>=1.0.0-beta-21, <=3.1.1), com.efluid.oss:efluid-datagate-app-cucumber (>=1.0.0-beta-21, <=3.1.1) +17 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.3.0)

org.pac4j:pac4j-core MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.efluid.oss:efluid-datagate-app =1.0.0-beta-21, =1.0.0-beta-21, =3.1.1 - org.pac4j:j2e-pac4j 4.1.0 -...

org.pac4j:pac4j-cas (4.5.3), org.pac4j:pac4j-config (4.5.3) +11 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.5.3)

org.pac4j:pac4j-core MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 4.5.3 - org.pac4j:pac4j-config 4.5.3 - org.pac4j:pac4j-couch 4.5.3 - org.pac4j:pac4j-gae 4.5.3 -...

org.marid:marid-ide-server (0.9.8.6), org.pac4j:pac4j-cas (3.8.1) +12 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.8.1)

org.pac4j:pac4j-core MAVEN version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.marid:marid-ide-server 0.9.8.6 - org.pac4j:pac4j-cas 3.8.1 - org.pac4j:pac4j-config 3.8.1 - org.pac4j:pac4j-couch...

io.buji:buji-pac4j-core (>=1.4.2, <=1.4.3), io.buji:buji-pac4j-servlet (>=1.4.2, <=1.4.3) +18 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.7)

org.pac4j:pac4j-core MAVEN version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j-core =1.4.2, =1.4.2, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr7 - org.pac4j:pac4j-cas 1.8.7 -...

org.pac4j:pac4j-cas (3.6.0), org.pac4j:pac4j-config (3.6.0) +11 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (3.6.0)

org.pac4j:pac4j-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 3.6.0 - org.pac4j:pac4j-config 3.6.0 - org.pac4j:pac4j-couch 3.6.0 - org.pac4j:pac4j-gae 3.6.0 -...

org.pac4j:pac4j-cas (1.9.3), org.pac4j:pac4j-config (1.9.3) +12 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.9.3)

org.pac4j:pac4j-core MAVEN version 1.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 1.9.3 - org.pac4j:pac4j-config 1.9.3 - org.pac4j:pac4j-gae 1.9.3 - org.pac4j:pac4j-http 1.9.3 -...

org.pac4j:pac4j-cas (1.8.6), org.pac4j:pac4j-config (1.8.6) +12 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.8.6)

org.pac4j:pac4j-core MAVEN version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 1.8.6 - org.pac4j:pac4j-config 1.8.6 - org.pac4j:pac4j-gae 1.8.6 - org.pac4j:pac4j-http 1.8.6 -...

org.pac4j:pac4j-cas (2.3.0), org.pac4j:pac4j-config (2.3.0) +12 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (2.3.0)

org.pac4j:pac4j-core MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 2.3.0 - org.pac4j:pac4j-config 2.3.0 - org.pac4j:pac4j-couch 2.3.0 - org.pac4j:pac4j-gae 2.3.0 -...

com.yahoo.sherlock:sherlock (>=1.11, <=1.13), org.pac4j:pac4j-cas (3.2.0) +18 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.2.0)

org.pac4j:pac4j-core MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.yahoo.sherlock:sherlock =1.11, =1.13 - org.pac4j:pac4j-cas 3.2.0 - org.pac4j:pac4j-config 3.2.0 -...

org.pac4j:pac4j-cas (1.9.8), org.pac4j:pac4j-config (1.9.8) +11 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.9.8)

org.pac4j:pac4j-core MAVEN version 1.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 1.9.8 - org.pac4j:pac4j-config 1.9.8 - org.pac4j:pac4j-gae 1.9.8 - org.pac4j:pac4j-http 1.9.8 -...

io.buji:buji-pac4j-core (1.4.1), io.buji:buji-pac4j-servlet (1.4.1) +14 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.8.4)

org.pac4j:pac4j-core MAVEN version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j-core 1.4.1 - io.buji:buji-pac4j-servlet 1.4.1 - org.pac4j:pac4j-cas 1.8.4 - org.pac4j:pac4j-config...

org.jasig.cas:cas-server-support-pac4j (>=4.2.0-rc1, <=4.2.1), org.jasig.cas:cas-server-support-pac4j-webflow (>=4.2.0-rc1, <=4.2.1) +1 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.2)

org.pac4j:pac4j-oidc MAVEN version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.jasig.cas:cas-server-support-pac4j =4.2.0-rc1, =4.2.0-rc1, =4.2.1 - org.pac4j:pac4j-config 1.8.2 Source cves:...

org.pac4j:pac4j-config (1.8.6) potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.6)

org.pac4j:pac4j-oidc MAVEN version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.pac4j:pac4j-config 1.8.6 Source cves: CVE-2021-44878 Source advisory: OSV:GHSA-XHW6-HJC9-679M...

org.pac4j:pac4j-config (1.8.4) potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.4)

org.pac4j:pac4j-oidc MAVEN version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.pac4j:pac4j-config 1.8.4 Source cves: CVE-2021-44878 Source advisory: OSV:GHSA-XHW6-HJC9-679M...

org.apache.knox:gateway-provider-security-pac4j (>=0.8.0, <=0.9.0), org.pac4j:pac4j-config (1.8.5) +1 more potentially affected by CVE-2021-44878 via org.pac4j:pac4j-oidc (1.8.5)

org.pac4j:pac4j-oidc MAVEN version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-oidc and may be impacted: - org.apache.knox:gateway-provider-security-pac4j =0.8.0, =0.9.0 - org.pac4j:pac4j-config 1.8.5 - org.pac4j:vertx-pac4j...