CVE-2026-33176

Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Support number helpers accept strings containing scientific notation e.g. 1e10000, which BigDecimal expands into extremely large...

CVE-2026-33170: Improper Neutralization of Input During Web Page Generation

Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, SafeBuffer% does not propagate the @htmlunsafe flag to the newly created buffer. If a SafeBuffer is mutated in place e.g. via gsub! and th...

WordPress NaturaLife Extensions plugin <= 2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin NaturaLife Extensions versions = 2.1...

WordPress NaturaLife Extensions plugin <= 2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin NaturaLife Extensions versions = 2.1...

org.keycloak:keycloak-authz-policy-drools (2.2.1.final), org.keycloak:keycloak-dependencies-server-all (2.2.1.final) +4 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (2.2.1.final)

org.keycloak:keycloak-services MAVEN version 2.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.2.1.final -...

org.keycloak:keycloak-authz-policy-drools (2.4.0.final), org.keycloak:keycloak-dependencies-server-all (2.4.0.final) +5 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (2.4.0.final)

org.keycloak:keycloak-services MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.4.0.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.0.final), org.keycloak:keycloak-dependencies-server-min (1.9.0.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (1.9.0.final)

org.keycloak:keycloak-services MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.final -...

org.keycloak:keycloak-dependencies-server-min (4.8.1.final), org.keycloak:keycloak-model-jpa (4.8.1.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (4.8.1.final)

org.keycloak:keycloak-services MAVEN version 4.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.8.1.final - org.keycloak:keycloak-model-jpa...

org.keycloak:keycloak-dependencies-server-all (1.9.5.final), org.keycloak:keycloak-dependencies-server-min (1.9.5.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (1.9.5.final)

org.keycloak:keycloak-services MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.5.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.0.cr1), org.keycloak:keycloak-dependencies-server-min (1.9.0.cr1) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (1.9.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.cr1 -...

org.keycloak:keycloak-authz-policy-drools (2.0.0.final), org.keycloak:keycloak-dependencies-server-all (2.0.0.final) +3 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (2.0.0.final)

org.keycloak:keycloak-services MAVEN version 2.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.0.0.final -...

org.keycloak:keycloak-dependencies-server-min (4.2.1.final), org.keycloak:keycloak-model-jpa (4.2.1.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (4.2.1.final)

org.keycloak:keycloak-services MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.2.1.final - org.keycloak:keycloak-model-jpa...

org.keycloak:keycloak-dependencies-server-all (1.9.3.final), org.keycloak:keycloak-dependencies-server-min (1.9.3.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (1.9.3.final)

org.keycloak:keycloak-services MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.3.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.7.final), org.keycloak:keycloak-dependencies-server-min (1.9.7.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (1.9.7.final)

org.keycloak:keycloak-services MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.7.final -...

org.keycloak:keycloak-dependencies-server-min (4.0.0.beta2), org.keycloak:keycloak-model-jpa (4.0.0.beta2) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (4.0.0.beta2)

org.keycloak:keycloak-services MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.0.0.beta2 - org.keycloak:keycloak-model-jpa...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.0.final) +3 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (4.2.0.final)

org.keycloak:keycloak-services MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

org.keycloak:keycloak-dependencies-server-min (4.0.0.final), org.keycloak:keycloak-model-jpa (4.0.0.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (4.0.0.final)

org.keycloak:keycloak-services MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.0.0.final - org.keycloak:keycloak-model-jpa...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (4.3.0.final) +3 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (4.3.0.final)

org.keycloak:keycloak-services MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.8.final), org.keycloak:keycloak-dependencies-server-min (1.9.8.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (1.9.8.final)

org.keycloak:keycloak-services MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final -...

org.keycloak:keycloak-dependencies-server-min (3.4.2.final), org.keycloak:keycloak-model-jpa (3.4.2.final) +2 more potentially affected by CVE-2026-4633 via org.keycloak:keycloak-services (3.4.2.final)

org.keycloak:keycloak-services MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 3.4.2.final - org.keycloak:keycloak-model-jpa...