11 CVEs affecting PAC4J products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: PAC4J, PAC4J-Jwt.