com.github.vzakharchenko:chillispot-radius-plugin (1.3.7), com.github.vzakharchenko:cisco-radius-plugin (1.3.7) +23 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (13.0.1)

org.keycloak:keycloak-services MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.7 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +17 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (14.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8...

com.abavilla:fpi-framework-core (>=1.6.2, <=1.6.4), com.abavilla:fpi-framework-pom (>=1.6.2, <=1.6.4) +88 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (20.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-framework-core =1.6.2, =1.6.2, =0.4.7-20.0.3, =0.4.7-20.0.3,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +38 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (18.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 -...

com.github.vzakharchenko:keycloak-plugins (1.0.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.0.2) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (8.0.2)

org.keycloak:keycloak-model-jpa MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.0.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.16), com.github.vzakharchenko:cisco-radius-plugin (1.3.16) +17 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (16.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.16 -...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +8 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (10.0.1)

org.keycloak:keycloak-model-jpa MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugi...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.16), com.github.vzakharchenko:cisco-radius-plugin (1.3.16) +32 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (16.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.16 -...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +12 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (10.0.1)

org.keycloak:keycloak-services MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.11), com.github.vzakharchenko:cisco-radius-plugin (1.4.11) +22 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (21.0.0)

org.keycloak:keycloak-services MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.11 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.4), com.github.vzakharchenko:cisco-radius-plugin (1.4.4) +34 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (18.0.0)

org.keycloak:keycloak-services MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.11), com.github.vzakharchenko:cisco-radius-plugin (1.3.11) +25 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (15.0.1)

org.keycloak:keycloak-services MAVEN version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.11 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +22 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (15.0.0)

org.keycloak:keycloak-services MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +12 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (10.0.1)

org.keycloak:keycloak-services MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugin...

EUVD-2026-16236

Mattermost Plugins versions =11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webhook requests. Mattermost Advisory ID: MMSA-2026-00584...

EUVD-2026-16246

Mattermost Plugins versions =11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589...

CVE-2026-3116

Mattermost Plugins versions =11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589...

CVE-2026-3109

Mattermost Plugins versions =11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webhook requests. Mattermost Advisory ID: MMSA-2026-00584...

CVE-2026-3109

Mattermost Plugins versions =11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webhook requests. Mattermost Advisory ID: MMSA-2026-00584...

CVE-2026-3109 Missing timestamp validation in Zoom webhook handler

Mattermost Plugins versions =11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webhook requests. Mattermost Advisory ID: MMSA-2026-00584...