Detections
Analytics

Pac4J JWT < 4.5.9 / 5.x < 5.7.9 / 6.x < 6.3.3 Authentication Bypass (CVE-2026-29000) (Direct Check)

critical Nessus Plugin ID 303225

Language:

Version 1.6

Oct 30, 2026, 8:32 AM

  • Logic Changes (improved socket handling in get_tls_server_response for TLS 1.3)

Plugin Feed: 202610300832

Version 1.2

Mar 23, 2026, 11:56 AM

  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C")

Plugin Feed: 202603231156

Version 1.1

Mar 21, 2026, 9:15 AM

  • New

Plugin Feed: 202603210915

* Changelogs are generally available for changes made after Nov 1, 2022