CVE-2023-31129: jooby-pac4j Untrusted Data Deserialization RCE

github.com 2025-04-02查看中文 →

Security AdvisoryCVE-2023-31129Highjooby-project

Affected:

jooby-pac4j 2.16.4
jooby-pac4j 3.6.1

Fixed in:

jooby-pac4j 2.17.0
jooby-pac4j 3.7.0

Referenced CVEs: CVE-2025-31129 · 8.8

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Logto ReDoS via unescaped regex (CVE-2024-62317) Advisory and Fix 2026-08-20 Logto Email Subaddressing Regex Bypass Fix via String Check 2026-08-20 Logto-Tunnel Path Traversal Vulnerability (CVE-2024-63188) and POC 2026-08-20 Static Path Traversal Vulnerability Fix and Hardening Guide 2026-08-20 OS Command Injection in logto-io/logto GitHub Actions Workflow 2026-08-20

Offline Archive

Offline screenshot & PDF are Pro-exclusive