ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +123 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (>=26.0.0, <=26.1.2)

org.keycloak:keycloak-core MAVEN version =26.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =1.0.0, =4.1.0-26.0, =4.1.0-26.0, =2.0.0-26.0, =1.1.1-26.0, =1.1.19, =0.3.19, =1.0.9 and more Source cves: CVE-2024-4028 Source advisory: OSV:GHSA-Q4XQ-445G-G6CH...

be.jidoka:jdk-keycloak-admin (2.4.0), com.qwlabs.doraemon:quarkus-test-resource-keycloak (0.3.26) +67 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (25.0.2)

org.keycloak:keycloak-core MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - be.jidoka:jdk-keycloak-admin 2.4.0 - com.qwlabs.doraemon:quarkus-test-resource-keycloak 0.3.26 -...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), de.retest:recheck (>=1.2.0-beta.1, <=1.4.0) +83 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (6.0.1)

org.keycloak:keycloak-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =1.2.0-beta.1, =1.3.0-beta.1, =0.0.7, =0.0.7, =0.0.6,...

com.github.dasniko:testcontainers-keycloak (2.3.0), net.micedre.keycloak:keycloak-mail-whitelisting (1.5) +58 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (19.0.0)

org.keycloak:keycloak-core MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.dasniko:testcontainers-keycloak 2.3.0 - net.micedre.keycloak:keycloak-mail-whitelisting 1.5 -...

org.keycloak:keycloak-account-api (1.0-beta-1-20150521), org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150521) +36 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.0-beta-1-20150521)

org.keycloak:keycloak-core MAVEN version 1.0-beta-1-20150521 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.0-beta-1-20150521 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.3), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (1.2.6.final) +55 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.9.4.final)

org.keycloak:keycloak-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.3 -...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +97 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (10.0.1)

org.keycloak:keycloak-core MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugin 1.2.4 -...

org.hawkular.accounts:hawkular-accounts (>=2.0.7.final, <=2.0.10.final), org.hawkular.accounts:hawkular-accounts-api (>=2.0.7.final, <=2.0.10.final) +91 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.8.0.alpha1)

org.keycloak:keycloak-core MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.hawkular.accounts:hawkular-accounts =2.0.7.final, =2.0.7.final, =2.0.7.final, =2.0.7.final,...

com.blazebit:blaze-storage-client-keycloak (>=0.2.0, <=0.3.3), com.blazebit:blaze-storage-modules-authentication-keycloak (>=0.2.0, <=0.3.3) +77 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.1.0.final)

org.keycloak:keycloak-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.blazebit:blaze-storage-client-keycloak =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.16.1, =1.1.0.rc3,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +101 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (18.0.1)

org.keycloak:keycloak-core MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 - com.github.vzakharchenko:cisco-radius-plugin 1.4...

org.fintrace:microservice-keycloak-support (>=0.0.4, <=0.0.9), org.keycloak:keycloak-adapter-core (4.0.0.beta3) +64 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (4.0.0.beta3)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.fintrace:microservice-keycloak-support =0.0.4, =0.0.9 - org.keycloak:keycloak-adapter-core...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.4.final, <=1.2.6.beta1), io.apiman:apiman-distro-eap7 (>=1.2.4.final, <=1.2.6.beta1) +48 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.9.2.final)

org.keycloak:keycloak-core MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.4.final, =1.2.4.final, =1.2.4.final,...

org.eclipse.dirigible:dirigible-server-spring (7.1.5), org.eclipse.dirigible:dirigible-spring-services (7.1.5) +51 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (20.0.4)

org.keycloak:keycloak-core MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.eclipse.dirigible:dirigible-server-spring 7.1.5 - org.eclipse.dirigible:dirigible-spring-services 7.1....

com.c4-soft.springaddons:spring-security-oauth2-test-addons (>=2.0.0, <=2.0.3), com.c4-soft.springaddons:spring-security-oauth2-test-webflux-addons (>=2.0.0, <=2.0.3) +67 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (9.0.0)

org.keycloak:keycloak-core MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-security-oauth2-test-addons =2.0.0, =2.0.0, =2.0.0, =1.1.0, =1.1.0, =1.1.0,...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (>=0.5.3, <=0.5.4), com.github.vzakharchenko:chillispot-radius-plugin (1.3.19) +96 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (16.1.1)

org.keycloak:keycloak-core MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak =0.5.3, =6.2.0, =6.2.0, =6.2.0, =6.0.0, =6.0.0, =6.4.0 and more...

org.keycloak:keycloak-account-api (1.8.0.cr2), org.keycloak:keycloak-account-freemarker (1.8.0.cr2) +82 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.8.0.cr2)

org.keycloak:keycloak-core MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.8.0.cr2 - org.keycloak:keycloak-account-freemarker 1.8.0.cr2 -...

org.keycloak:keycloak-account-api (1.1.0.beta1), org.keycloak:keycloak-account-freemarker (1.1.0.beta1) +51 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.1.0.beta1)

org.keycloak:keycloak-core MAVEN version 1.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.1.0.beta1 - org.keycloak:keycloak-account-freemarker 1.1.0.beta1 ...

com.c4-soft.springaddons:spring-addons-keycloak (>=4.0.0, <=4.2.0), com.c4-soft.springaddons:spring-addons-keycloak-jdk1.8 (>=4.1.3, <=4.1.5) +94 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (17.0.0)

org.keycloak:keycloak-core MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-addons-keycloak =4.0.0, =4.1.3, =4.1.0, =1.10.0, =1.4.0, =1.4.0, =1.4.0,...

ca.bc.gov.tno:dal-db (0.0.8-alpha), com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.4.12) +102 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (13.0.1)

org.keycloak:keycloak-core MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - ca.bc.gov.tno:dal-db 0.0.8-alpha - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.4.12 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +70 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (9.0.2)

org.keycloak:keycloak-core MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin 1.2.2 -...