CSRF and LDAP injection found and fixed in pac4j security framework | Dark Hacker News