light-4j vulnerabilities

CVEs whose affected-version data names the light-4j package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113682High· 7.4

today

Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password

Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header wi…

▾ Twilightnetworknt · light-4jvia CVEORG