de.adorsys.keycloak:keycloak-clientregistration-provider (>=1.2, <=3.0), de.adorsys.keycloak:keycloak-provider-extension (>=1.2, <=3.0) +16 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (3.4.3.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.keycloak:keycloak-clientregistration-provider =1.2, =1.2,...

org.keycloak:keycloak-forms (1.0-alpha-1) potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.0-alpha-1)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1 Source cves: CVE-2026-9704 Source advisory:...

org.keycloak:keycloak-dependencies-server-all (1.9.5.final), org.keycloak:keycloak-dependencies-server-min (1.9.5.final) +2 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.9.5.final)

org.keycloak:keycloak-services MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.5.final -...

org.keycloak:keycloak-dependencies-server-min (4.0.0.final), org.keycloak:keycloak-model-jpa (4.0.0.final) +2 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (4.0.0.final)

org.keycloak:keycloak-services MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.0.0.final - org.keycloak:keycloak-model-jpa...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.16), com.github.vzakharchenko:cisco-radius-plugin (1.3.16) +32 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (16.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.16 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.11), io.phasetwo.keycloak:keycloak-events (>=0.30, <=0.33) +29 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (25.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.11 -...

com.charlyghislain.keycloak:keycloak-importexport (12.0.0), com.github.vzakharchenko:chillispot-radius-plugin (1.3.5) +34 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (12.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 12.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 12.0.0 -...

org.keycloak:keycloak-account-freemarker (1.0.2.final), org.keycloak:keycloak-dependencies-server-all (1.0.2.final) +3 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.0.2.final)

org.keycloak:keycloak-services MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.2.final -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +30 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (12.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9,...

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-crypto-fips1402 (25.0.5) +13 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (25.0.5)

org.keycloak:keycloak-services MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

org.keycloak:keycloak-authz-policy-common (2.5.4.final), org.keycloak:keycloak-authz-policy-drools (2.5.4.final) +12 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (2.5.4.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.4.final -...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.0.final) +3 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (4.2.0.final)

org.keycloak:keycloak-services MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

io.github.trustedshops-public:spring-boot-starter-keycloak-path-based-resolver (1.0.4), net.optionfactory.keycloak:optionfactory-keycloak-apple-identity-provider (2.0) +51 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (20.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.trustedshops-public:spring-boot-starter-keycloak-path-based-resolver...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11) +9 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (6.0.1)

org.keycloak:keycloak-services MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =0.0.6, =0.0.6, =1.0.11 -...

org.keycloak:keycloak-authz-policy-common (3.3.0.final), org.keycloak:keycloak-authz-policy-drools (3.3.0.final) +13 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (3.3.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.final -...

org.keycloak:keycloak-authz-policy-common (2.5.0.cr1), org.keycloak:keycloak-authz-policy-drools (2.5.0.cr1) +12 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (2.5.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (3.0.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.0.0.cr1) +11 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (3.0.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.0.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (3.0.0.final), org.keycloak:keycloak-authz-policy-drools (3.0.0.final) +11 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (3.0.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.0.0.final -...

org.keycloak:keycloak-authz-policy-common (2.4.0.final), org.keycloak:keycloak-authz-policy-drools (2.4.0.final) +12 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (2.4.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.4.0.final -...

org.keycloak:keycloak-authz-policy-common (2.5.0.final), org.keycloak:keycloak-authz-policy-drools (2.5.0.final) +12 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (2.5.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.0.final -...