2 points | by traekfuglene 7 hours ago ago
2 comments
I'm the one who found and reported these while doing security research at striga.ai. The pac4j team was responsive and shipped fixes quickly. If you use pac4j with LDAP or rely on its CSRF protection, upgrade to 6.4.1 / 5.7.10 / 4.5.10
I'm the one who found and reported these while doing security research at striga.ai. The pac4j team was responsive and shipped fixes quickly. If you use pac4j with LDAP or rely on its CSRF protection, upgrade to 6.4.1 / 5.7.10 / 4.5.10