org.keycloak:keycloak-authz-policy-common (2.5.5.final), org.keycloak:keycloak-authz-policy-drools (2.5.5.final) +12 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (2.5.5.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.5.final -...

org.keycloak:keycloak-authz-policy-common (3.1.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.1.0.cr1) +11 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (3.1.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.1.0.cr1 -...

fr.cnieg.keycloak:attribute-login-provider (>=1.3.9, <=1.3.10), io.phasetwo.keycloak:keycloak-events (>=0.21, <=0.22) +41 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (22.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.9, =0.21, =0.44, =3.2.8.final,...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.2.1), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.2.1) +61 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (23.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.2.1 -...

dev.jcputney:keycloak-theme-additional-info-extension (>=1.1.4, <=1.1.5), org.eclipse.dirigible:dirigible-application (8.18.9) +47 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (23.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - dev.jcputney:keycloak-theme-additional-info-extension =1.1.4, =1.1.5 -...

com.charlyghislain.keycloak:keycloak-importexport (23.0.1), fr.cnieg.keycloak:attribute-login-provider (1.3.13) +62 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (23.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 23.0.1 -...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.2.2), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.2.2) +64 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (23.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.2.2 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.5), io.github.opentdf.keycloak:keycloak-opentdf-extension (1.1.0) +61 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (24.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.5 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=3.0.1-25.0, <=4.0.1-25.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0) +35 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (25.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =3.0.1-25.0, =3.0.1-25.0,...

de.adorsys.sts:keycloak-storage-provider (>=1.2.0, <=1.2.4), net.optionfactory.keycloak:optionfactory-keycloak-apple-identity-provider (>=6.5, <=6.9) +33 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (25.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.2.0, =6.5, =6.5, =6.5, =6.5, =6.5,...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (4.0.2-25.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0) +33 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (25.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension 4.0.2-25.0 -...

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-authz-policy-common (25.0.5) +23 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (25.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

org.keycloak:keycloak-forms (1.0-alpha-1-12062013), org.keycloak:keycloak-server (1.0-alpha-1-12062013) potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.0-alpha-1-12062013)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1-12062013 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1-12062013 - org.keycloak:keycloak-server...

org.keycloak:keycloak-account-freemarker (1.0-alpha-2), org.keycloak:keycloak-login-freemarker (1.0-alpha-2) +1 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.0-alpha-2)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-2 - org.keycloak:keycloak-login-freemarker...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +170 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.6.2)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =13.10.0.release and more Source cves: CVE-2026-9704 Source advisory: OSV:GHSA-RR5Q-3XWR-F323...

com.kleegroup.accelerator:accelerator-message-keycloakbrevo (>=1.0.1, <=1.0.2), com.kleegroup.accelerator:accelerator-security-keycloakmfa (1.0.1) +53 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (24.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.kleegroup.accelerator:accelerator-message-keycloakbrevo =1.0.1,...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.3.2), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.3.2) +68 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (24.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.3.2 -...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=4.0.3-25.0, <=4.0.5-25.0) +33 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (25.0.6)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - ch.iterial.keycloak.plugins:keycloak-directus-plugin =0.1.0, =4.0.3-25.0,...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +170 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.6.2)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =13.10.0.release and more Source cves: CVE-2026-9704 Source advisory: GHSA-RR5Q-3XWR-F323...

org.keycloak:keycloak-account-freemarker (1.0-alpha-3), org.keycloak:keycloak-login-freemarker (1.0-alpha-3) +1 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.0-alpha-3)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-3 - org.keycloak:keycloak-login-freemarker...