io.ratpack:ratpack-pac4j (>=1.2.0-rc-1, <=1.3.3), net.binggl:ninja-google-oauth-module (>=1.0.2, <=1.0.3) +16 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (1.8.5)

org.pac4j:pac4j-core MAVEN version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.ratpack:ratpack-pac4j =1.2.0-rc-1, =1.0.2, =1.0.3 - org.pac4j:j2e-pac4j 1.2.2 - org.pac4j:pac4j-cas 1.8.5 -...