pkg:maven/org.pac4j/pac4j-oidc
Type
maven
Namespace
org.pac4j
Name
pac4j-oidc
Known advisories, vulnerabilities and fixes for org.pac4j/pac4j-oidc package.
High
1
Type | Version | Distribution | # CVEs | # Advisory ID | Title | Severity | Published |
---|---|---|---|---|---|---|---|
Affected | >= 5.0, < 5.3.1 < 4.5.5 |
CVE-2021-44878
|
MAVEN:GHSA-XHW6-HJC9-679M | Pac4j token validation bypass if OpenID Connect provider supports none algorithm | high |
2022-01-08T00:36:05
(2 years ago) |
|
Fixed | = 5.3.1 = 4.5.5 |
CVE-2021-44878
|
MAVEN:GHSA-XHW6-HJC9-679M | Pac4j token validation bypass if OpenID Connect provider supports none algorithm | high |
2022-01-08T00:36:05
(2 years ago) |