PPAC4J

Products

Exploited and recent CVEs

• CVE-2026-82465 Medium 5.3 pac4j-saml before 6.5.6 Session Destruction via Unsigned LogoutRequest 0.3%
• CVE-2026-82464 Medium 6.1 pac4j-core before 6.5.6 Open Redirect via Backslash Logout 0.3%
• CVE-2026-82463 High 8.1 pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check 0.6%
• CVE-2026-82462 Medium 6.5 pac4j-oidc before 6.5.6 Authentication Bypass via Access Token Substitution 0.2%
• CVE-2026-82461 High 8.1 pac4j-oidc before 6.5.6 Privilege Escalation via Unverified Keycloak Access Token 0.3%
• CVE-2026-40459 High 8.7 LDAP Injection in PAC4J 0.6%
• CVE-2026-40458 High 7.0 Cross-Site Request Forgery in PAC4J 0.2%
• CVE-2026-29000 Critical 9.1 pac4j-jwt JwtAuthenticator Authentication Bypass 6.2%
• CVE-2023-25581 Critical 9.2 Deserialization of untrusted data in InternalAttributeHandler in pac4j 1.9%