CLEANSTART-2026-DI52331 Security fix for CVE-2026-73508 applied in: keycloak 26.5.7-r7

Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-73508 vulnerabilities

Vulnerabilities for packages: tinkerpop, keycloak, s3proxy, apicurio-registry-fips, camunda-zeebe, airbyte-server, kafbat-ui-fips, hono, traccar-fips, elasticsearch, management-api-for-apache-cassandra-5.0, apache-nifi, request-9047-keycloak-fips, pinot-fips, s3proxy-fips, apache-hop-fips, camund...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +4568 more potentially affected by CVE-2026-73508 via io.netty:netty-codec-dns (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-dns MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =1.8.1 and more Source cves: CVE-2026-73508 Source advisory: MEND:CVE-2026-73508...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +4568 more potentially affected by CVE-2026-73508 via io.netty:netty-codec-dns (>=4.2.0.final, <=4.2.15.final)

io.netty:netty-codec-dns MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =1.8.1 and more Source cves: CVE-2026-73508 Source advisory: GHSA-MFG7-5GFP-C4W3...