Skip to content

pac4j-jwt: JwtAuthenticator Authentication Bypass via JWE-Wrapped PlainJWT

Critical severity GitHub Reviewed Published Mar 5, 2026 to the GitHub Advisory Database • Updated Mar 6, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts