org.pac4j:pac4j-cas (1.8.6), org.pac4j:pac4j-config (1.8.6) +12 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.8.6)

org.pac4j:pac4j-core MAVEN version 1.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 1.8.6 - org.pac4j:pac4j-config 1.8.6 - org.pac4j:pac4j-gae 1.8.6 - org.pac4j:pac4j-http 1.8.6 -...

com.yahoo.sherlock:sherlock (>=1.11, <=1.13), org.pac4j:pac4j-cas (3.2.0) +18 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (3.2.0)

org.pac4j:pac4j-core MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.yahoo.sherlock:sherlock =1.11, =1.13 - org.pac4j:pac4j-cas 3.2.0 - org.pac4j:pac4j-config 3.2.0 -...

org.pac4j:pac4j-cas (1.9.8), org.pac4j:pac4j-config (1.9.8) +11 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.9.8)

org.pac4j:pac4j-core MAVEN version 1.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - org.pac4j:pac4j-cas 1.9.8 - org.pac4j:pac4j-config 1.9.8 - org.pac4j:pac4j-gae 1.9.8 - org.pac4j:pac4j-http 1.9.8 -...

io.buji:buji-pac4j-core (1.4.1), io.buji:buji-pac4j-servlet (1.4.1) +14 more potentially affected by CVE-2023-25581 via org.pac4j:pac4j-core (1.8.4)

org.pac4j:pac4j-core MAVEN version 1.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - io.buji:buji-pac4j-core 1.4.1 - io.buji:buji-pac4j-servlet 1.4.1 - org.pac4j:pac4j-cas 1.8.4 - org.pac4j:pac4j-config...