CVE-2026-3872 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2026-4874 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2026-4636 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2026-4634 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2026-4633 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

GHSA-CJM2-J6CM-6P6M vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-HJ93-H7PG-FH6V vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-RX66-HJ7G-28H7 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-22RM-WP4X-V5CX vulnerabilities

Vulnerabilities for packages: keycloak-fips...

GHSA-4PGC-GFRR-WCMG vulnerabilities

Vulnerabilities for packages: keycloak-fips...

GHSA-F2HX-5FX3-HMCV vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-H4WV-G838-66G3 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-RHGQ-F8X5-J2JC vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...

CVE-2026-4628 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2026-4325 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

Excessive Platform Resource Consumption within a Loop

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Excessive Platform Resource Consumption within a Loop via the scope parameter processing in the OpenID Connec...

GHSA-H4WV-G838-66G3 Keycloak: Application-Level DoS via Scope Processing

A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect OIDC token endpoint. This leads to high resource consumption and prolonged processing times, ultimate...

Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Incorrect Behavior Order: Authorization Before Parsing and Canonicalization via the UMA Policy Resource user...

Improper Isolation or Compartmentalization

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization due to improper type and namespace isolation in the...

GHSA-HJ93-H7PG-FH6V Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens,...