de.tum.cit.aet:keycloak-redirectless-passkey (>=1.3.1, <=1.3.2), fr.cnieg.keycloak:attribute-login-provider (>=1.11.17, <=1.11.18) +60 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (>=26.5.0, <=26.5.1)

org.keycloak:keycloak-services MAVEN version =26.5.0, =1.3.1, =1.11.17, =0.6.2, =0.51, =0.53, =0.125, =0.46, =8.13, =8.13, =8.13, =8.13, =8.13, =8.13, =9.0 and more Source cves: CVE-2025-13881 Source advisory: GHSA-G78X-7VWX-9F58...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.0.2, <=1.1.0-alpha.1), org.keycloak:keycloak-account-freemarker (1.0.4.final) +4 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (1.0.4.final)

org.keycloak:keycloak-services MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.0.2, =1.1.0-alpha.1 -...

org.keycloak:keycloak-account-freemarker (1.0.3.final), org.keycloak:keycloak-dependencies-server-all (1.0.3.final) +3 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (1.0.3.final)

org.keycloak:keycloak-services MAVEN version 1.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.3.final -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

de.adorsys.keycloak:keycloak-clientregistration-provider (>=1.2, <=3.0), de.adorsys.keycloak:keycloak-provider-extension (>=1.2, <=3.0) +8 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (3.4.3.final)

org.keycloak:keycloak-services MAVEN version 3.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.keycloak:keycloak-clientregistration-provider =1.2, =1.2, =0.0.1, =0.0.1, =0.0.1,...

org.keycloak:keycloak-account-freemarker (1.7.0.cr1), org.keycloak:keycloak-broker-oidc (1.7.0.cr1) +9 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (1.7.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.7.0.cr1 - org.keycloak:keycloak-broker-oidc 1.7.0.cr...

fr.cnieg.keycloak:attribute-login-provider (1.4.5), io.github.opentdf.keycloak:keycloak-opentdf-extension (1.1.0) +28 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (24.0.1)

org.keycloak:keycloak-services MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.5 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.2.6), com.github.vzakharchenko:cisco-radius-plugin (1.2.6) +18 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (11.0.0)

org.keycloak:keycloak-services MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.2.6 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=1.1.0-22.0.1, <=1.3.2-22.0.1), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=1.1.0-22.0.1, <=1.3.2-22.0.1) +29 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (22.0.1)

org.keycloak:keycloak-services MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =1.1.0-22.0.1, =1.1.0-22.0.1, =1.0.1, =1.0.2 -...

org.keycloak:keycloak-dependencies-server-min (4.2.1.final), org.keycloak:keycloak-model-jpa (4.2.1.final) +2 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (4.2.1.final)

org.keycloak:keycloak-services MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.2.1.final - org.keycloak:keycloak-model-jpa...

org.keycloak:keycloak-authz-policy-drools (2.1.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.1.0.cr1) +3 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (2.1.0.cr1)

org.keycloak:keycloak-services MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.1.0.cr1 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +27 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (13.0.0)

org.keycloak:keycloak-services MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.8.3-20.0.5, <=0.10.0-20.0.5), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.8.3-20.0.5, <=0.10.0-20.0.5) +14 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (20.0.5)

org.keycloak:keycloak-services MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =0.8.3-20.0.5, =0.8.3-20.0.5, =0.10.0-20.0.5 -...

org.keycloak:keycloak-authz-policy-drools (3.4.0.final), org.keycloak:keycloak-dependencies-server-all (3.4.0.final) +6 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (3.4.0.final)

org.keycloak:keycloak-services MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.0.final -...

org.keycloak:keycloak-account-freemarker (1.0-beta-2), org.keycloak:keycloak-login-freemarker (1.0-beta-2) potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (1.0-beta-2)

org.keycloak:keycloak-services MAVEN version 1.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-beta-2 - org.keycloak:keycloak-login-freemarker...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.3), com.github.vzakharchenko:cisco-radius-plugin (1.3.3) +23 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (12.0.2)

org.keycloak:keycloak-services MAVEN version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.3 -...

org.keycloak:keycloak-account-freemarker (1.0.1.final), org.keycloak:keycloak-dependencies-server-all (1.0.1.final) +3 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (1.0.1.final)

org.keycloak:keycloak-services MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.1.final -...

fr.cnieg.keycloak:attribute-login-provider (1.4.2), io.phasetwo.keycloak:keycloak-orgs (>=0.53, <=0.57) +24 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (23.0.6)

org.keycloak:keycloak-services MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.2 - io.phasetwo.keycloak:keycloak-orgs =0.53, =0.57...

de.tum.cit.aet:keycloak-redirectless-passkey (>=1.3.1, <=1.3.2), fr.cnieg.keycloak:attribute-login-provider (>=1.11.17, <=1.11.18) +60 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (>=26.5.0, <=26.5.1)

org.keycloak:keycloak-services MAVEN version =26.5.0, =1.3.1, =1.11.17, =0.6.2, =0.51, =0.53, =0.125, =0.46, =8.13, =8.13, =8.13, =8.13, =8.13, =8.13, =9.0 and more Source cves: CVE-2025-13881 Source advisory: OSV:GHSA-G78X-7VWX-9F58...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +12 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-services (10.0.1)

org.keycloak:keycloak-services MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugin...