Skip to content
Threat Feed
Subscribe

Vendor

Pac4j

3 briefs RSS
high advisory

Authentication Bypass Vulnerability in pac4j-core

An authentication bypass vulnerability in pac4j-core versions prior to 6.5.6 caused by flawed validation logic in CheckProfileTypeAuthorizer allows unauthorized access to restricted resources.

pac4j-core
1t 1c
high advisory

Authentication Bypass in pac4j-oidc via Token Forgery

An authorization bypass vulnerability in pac4j-oidc versions prior to 6.5.6 allows attackers to forge OIDC access tokens by exploiting the library's failure to validate token signatures, issuers, audiences, and expiration.

pac4j-oidc vulnerability authentication-bypass oidc identity-security
1t 1c
critical advisory

CVE-2026-29000: pac4j JWT Authentication Bypass Vulnerability

A public exploit is available for CVE-2026-29000, a critical authentication bypass vulnerability in pac4j's JWT implementation, allowing attackers to forge admin tokens without a valid signature by exploiting flaws in the library's handling of unsigned tokens and JWE-wrapped tokens.

pac4j JWT module authentication-bypass jwt pac4j cve-2026-29000
2r 3t 1c 4i