#pac4j — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #pac4j, aggregated by home.social.
-
CVE Alert: CVE-2026-82463 - pac4j - pac4j - https://www.redpacketsecurity.com/cve-alert-cve-2026-82463-pac4j-pac4j/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-82463 #pac4j #
-
CVE Alert: CVE-2026-82461 - pac4j - pac4j - https://www.redpacketsecurity.com/cve-alert-cve-2026-82461-pac4j-pac4j/
#OSINT #ThreatIntel #CyberSecurity #cve-2026-82461 #pac4j #
-
Back in April, I had to fight with Pac4j adding OpenID Connect to an application that, for the first time in many projects, had a public/anonymous section.
Out of frustration, I then created my own project, and now after months of procrastination, I'm releasing 1.0.0-rc-1
https://github.com/tbroyer/oidc-servlets(and before you ask, the project at work isn't using this, it's still using Pac4j)
-
#Java: Popular Java Security Framework #pac4j Vulnerable to Remote Code Execution (#RCE) Critical Vulnerability CVE-2023-25581.
Great find and GitHub Advisory by @artsploit:
👇
https://securityonline.info/popular-java-security-framework-pac4j-vulnerable-to-rce-cve-2023-25581/ -
connect2id's Nimbus OAuth2/OIDC SDK is underrated, particularly as a direct dependency!
https://connect2id.com/products/nimbus-oauth-openid-connect-sdk
Many people use it through Spring Security or Pac4j but the lib is relatively easy to use directly (particularly if you know the protocols) and can be used to add OIDC support to Java apps with much less complexity than those Spring or Pac4j authentication frameworks (but at the cost of having to handle some of the Web security yourself, mainly around CSRF)