pac4j vulnerabilities
9 published CVEs name pac4j among the affected products.
- 9Published CVEs9 of them scored
- 8Last 12 monthspublished in the last year
- 2Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-82465
pac4j-saml before 6.5.6 Session Destruction via Unsigned LogoutRequest
pac4j · pac4j
Medium6.9 - CVE-2026-82464
pac4j-core before 6.5.6 Open Redirect via Backslash Logout
pac4j · pac4j
Medium5.3 - CVE-2026-82463
pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check
pac4j · pac4j
High8.6 - CVE-2026-82462
pac4j-oidc before 6.5.6 Authentication Bypass via Access Token Substitution
pac4j · pac4j
Medium6.9 - CVE-2026-82461
pac4j-oidc before 6.5.6 Privilege Escalation via Unverified Keycloak Access Token
pac4j · pac4j
High8.6 - CVE-2026-40459
LDAP Injection in PAC4J
PAC4J · PAC4J
High8.7 - CVE-2026-40458
Cross-Site Request Forgery in PAC4J
PAC4J · PAC4J
High7.0 - CVE-2026-29000
pac4j-jwt JwtAuthenticator Authentication Bypass
pac4j · pac4j-jwt
Critical9.3 - CVE-2023-25581
Deserialization of untrusted data in InternalAttributeHandler in pac4j
pac4j · pac4j
Critical9.2