CVE-2026-2092 vulnerabilities

Vulnerabilities for packages: keycloak-fips, keycloak, request-9047-keycloak-fips...

CVE-2026-2092

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...