com.c4-soft.springaddons:spring-security-oauth2-test-addons (>=2.0.0, <=2.0.3), com.c4-soft.springaddons:spring-security-oauth2-test-webflux-addons (>=2.0.0, <=2.0.3) +67 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (9.0.0)

org.keycloak:keycloak-core MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-security-oauth2-test-addons =2.0.0, =2.0.0, =2.0.0, =1.1.0, =1.1.0, =1.1.0,...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (>=0.5.3, <=0.5.4), com.github.vzakharchenko:chillispot-radius-plugin (1.3.19) +96 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (16.1.1)

org.keycloak:keycloak-core MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak =0.5.3, =6.2.0, =6.2.0, =6.2.0, =6.0.0, =6.0.0, =6.4.0 and more...

org.keycloak:keycloak-account-api (1.1.0.beta1), org.keycloak:keycloak-account-freemarker (1.1.0.beta1) +51 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.1.0.beta1)

org.keycloak:keycloak-core MAVEN version 1.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.1.0.beta1 - org.keycloak:keycloak-account-freemarker 1.1.0.beta1 ...

com.c4-soft.springaddons:spring-addons-keycloak (>=4.0.0, <=4.2.0), com.c4-soft.springaddons:spring-addons-keycloak-jdk1.8 (>=4.1.3, <=4.1.5) +94 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (17.0.0)

org.keycloak:keycloak-core MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-addons-keycloak =4.0.0, =4.1.3, =4.1.0, =1.10.0, =1.4.0, =1.4.0, =1.4.0,...

ca.bc.gov.tno:dal-db (0.0.8-alpha), com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.4.12) +102 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (13.0.1)

org.keycloak:keycloak-core MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - ca.bc.gov.tno:dal-db 0.0.8-alpha - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.4.12 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +70 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (9.0.2)

org.keycloak:keycloak-core MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin 1.2.2 -...

org.jenkins-ci.plugins:keycloak (2.0.3), org.keycloak:keycloak-adapter-core (3.2.0.final) +58 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (3.2.0.final)

org.keycloak:keycloak-core MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jenkins-ci.plugins:keycloak 2.0.3 - org.keycloak:keycloak-adapter-core 3.2.0.final -...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.7.beta1, <=1.2.7.final), io.apiman:apiman-distro-eap7 (>=1.2.7.beta1, <=1.2.7.final) +49 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.9.7.final)

org.keycloak:keycloak-core MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.7.beta1, =1.2.7.beta1, =1.2.7.beta1,...

com.github.dasniko:testcontainers-keycloak (3.3.0), fr.cnieg.keycloak:attribute-login-provider (1.4.4) +66 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (24.0.0)

org.keycloak:keycloak-core MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.dasniko:testcontainers-keycloak 3.3.0 - fr.cnieg.keycloak:attribute-login-provider 1.4.4 -...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=2.2.0.final, <=2.2.3.final), io.apiman:apiman-manager-api-security (>=2.2.0.final, <=2.2.3.final) +72 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (15.1.1)

org.keycloak:keycloak-core MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =2.2.0.final, =2.2.0.final, =5.3.0.alpha2,...

org.keycloak:keycloak-adapter-core (2.5.0.cr1), org.keycloak:keycloak-admin-client (2.5.0.cr1) +52 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (2.5.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.cr1 - org.keycloak:keycloak-admin-client 2.5.0.cr1 -...

com.premiumminds.flowable:flowable-keycloak (1.5), de.adorsys.keycloak:user-secret-adapter-common (1.0.7) +79 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (7.0.0)

org.keycloak:keycloak-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.premiumminds.flowable:flowable-keycloak 1.5 - de.adorsys.keycloak:user-secret-adapter-common 1.0.7 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (2.0.0), fr.cnieg.keycloak:attribute-login-provider (1.3.5) +88 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (21.1.2)

org.keycloak:keycloak-core MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 2.0.0 - fr.cnieg.keycloak:attribute-login-provider 1.3.5 ...

org.keycloak:keycloak-adapter-core (4.7.0.final), org.keycloak:keycloak-admin-client (4.7.0.final) +63 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (4.7.0.final)

org.keycloak:keycloak-core MAVEN version 4.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 4.7.0.final - org.keycloak:keycloak-admin-client 4.7.0.final -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +141 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (14.0.0)

org.keycloak:keycloak-core MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +96 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (15.0.0)

org.keycloak:keycloak-core MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 - com.github.vzakharchenko:cisco-radius-plugin...

eu.limetri.ygg:ygg-client (0.12), eu.limetri.ygg:ygg-client-installed (>=0.13, <=0.16) +56 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.0.4.final)

org.keycloak:keycloak-core MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - eu.limetri.ygg:ygg-client 0.12 - eu.limetri.ygg:ygg-client-installed =0.13, =1.0.2, =1.0.2, =1.0.2,...

com.canoo.dolphin-platform:dolphin-platform-security-client (>=1.0.0.cr4, <=1.0.0.cr5), com.canoo.dolphin-platform:dolphin-platform-security-server (>=1.0.0.cr4, <=1.0.0.cr5) +88 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (3.4.3.final)

org.keycloak:keycloak-core MAVEN version 3.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-security-client =1.0.0.cr4, =1.0.0.cr4, =1.0.0.cr4,...

be.jidoka:jdk-keycloak-admin (>=2.0.0, <=2.2.0), com.abavilla:fpi-framework-core (>=1.6.2, <=1.6.4) +112 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (20.0.3)

org.keycloak:keycloak-core MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - be.jidoka:jdk-keycloak-admin =2.0.0, =1.6.2, =1.6.2, =0.2.131, =0.2.175 and more Source cves: CVE-2024-402...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.5.2), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +104 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (16.1.0)

org.keycloak:keycloak-core MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.5.2 - com.c4-soft.springaddons:keycloak-grants-mapper...