Affecting org.pac4j:pac4j-saml artifact, versions [,3.8.2)Report new vulnerabilities
org.pac4j:pac4j-saml is an is PAC4J package for the SAML Protocol.
Affected versions of this package are vulnerable to Insecure Randomness. A insecure source of randomness is used to generate all of its random values as it relies upon apache commons lang3
RandomStringUtils. This SAML identifier generated within
SAML2Utils.java was found to make use of this class. Note: This issue only affects the 3.X release of
org.pac4j:pac4j-saml to version 3.8.2 or higher.