CVE-2025-9162 vulnerabilities

Vulnerabilities for packages: keycloak...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=9.11, <=9.15), org.keycloak.testframework:keycloak-test-framework-clustering (26.7.2) +28 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.7.2)

org.keycloak:keycloak-model-storage-services MAVEN version 26.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-providers =9.11, =9....

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.4) +21 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.3.0, <=26.3.4)

org.keycloak:keycloak-model-storage-services MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.4 and more Source cves: CVE-2025-...

org.keycloak.testframework:keycloak-test-framework-core (26.2.0), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.0) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.0 -...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-guides (24.0.4) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.4)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 -...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-guides (25.0.5) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.5.6), org.keycloak.testframework:keycloak-test-framework-core (26.5.6) +23 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.6)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.5.6 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.5.0), org.keycloak.testframework:keycloak-test-framework-core (26.5.0) +23 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.5.0 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (5.2.0-26.1), org.keycloak.testframework:keycloak-test-framework-core (26.1.3) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.1.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 5.2.0-26.1 -...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.15 Update

New Red Hat build of Keycloak 26.0.15 packages are available from the Customer Portal Red Hat build of Keycloak 26.0.15 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...

Keycloak <= 26.3.3 Code Injection (GHSA-w2wj-hw98-233h)

The version of Keycloak installed on the remote host is prior or equal to 26.3.3. It is, therefore, affected by code injection vulnerability as reference in GHSA-w2wj-hw98-233h advisory. - A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource...