Wednesday, May 20, 2026
Java CAS Client JWT Vulnerability Disclosure
Disclosure of a security issue with the Java CAS Client validating JWTs.
Saturday, Apr 25, 2026
Apereo CAS - External Identity Providers
An overview of Apereo CAS' ability to register identity providers for external and delegated authentication attempts.
Friday, Mar 6, 2026
CAS JWT Authentication Vulnerability Disclosure
Disclosure of a security issue with the Apereo CAS software using JWT non-interactive authentication.
Monday, Feb 9, 2026
Performance improvements on the service registry
An overview of the work done on performance.
Saturday, Feb 7, 2026
Apereo CAS Dynamic Configuration Management
An overview of Apereo CAS' ability to handle dynamic configuration updates.
Sunday, Feb 1, 2026
Apereo CAS Receives NLnet Grant to Advance CAS Development
We’re excited to share that the Apereo CAS project has been awarded funding from NLnet to support the development of the CAS project.
Thursday, Sep 25, 2025
CAS OAuth/OpenID Connect Vulnerability Disclosure
Disclosure of a security issue with the Apereo CAS software acting itself as an OAuth/OpenID Connect provider.
Tuesday, Aug 19, 2025
CAS Simple Multifactor Authentication Vulnerability Disclosure
Disclosure of a security issue with the Apereo CAS software acting itself as an MFA provider.