io.buji:buji-pac4j-core (>=1.4.2, <=1.4.3), io.buji:buji-pac4j-servlet (>=1.4.2, <=1.4.3) +18 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.7)

org.pac4j:pac4j-core MAVEN version 1.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j-core =1.4.2, =1.4.2, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr7 - org.pac4j:pac4j-cas 1.8.7 -...