org.keycloak:keycloak-guides (22.0.1), org.keycloak:keycloak-guides-maven-plugin (22.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (22.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.1 - org.keycloak:keycloak-guides-maven-plugin 22.0.1...

org.keycloak:keycloak-guides (18.0.1), org.keycloak:keycloak-guides-maven-plugin (18.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (18.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 18.0.1 - org.keycloak:keycloak-guides-maven-plugin 18.0.1...

org.keycloak:keycloak-guides (20.0.0), org.keycloak:keycloak-guides-maven-plugin (20.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (20.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.0 - org.keycloak:keycloak-guides-maven-plugin 20.0.0...

org.keycloak:keycloak-guides (22.0.4), org.keycloak:keycloak-guides-maven-plugin (22.0.4) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (22.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.4 - org.keycloak:keycloak-guides-maven-plugin 22.0.4...

org.keycloak:keycloak-quarkus-server-app (13.0.1), org.keycloak:keycloak-quarkus-server-deployment (13.0.1) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (13.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.1 -...

org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin 23.0.3...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-guides (21.1.0) +4 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (21.1.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-guides 21.1.0 ...

org.keycloak:keycloak-quarkus-server-app (12.0.3), org.keycloak:keycloak-quarkus-server-deployment (12.0.3) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (12.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.3 -...

org.keycloak:keycloak-guides (23.0.6), org.keycloak:keycloak-guides-maven-plugin (23.0.6) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.6)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.6 - org.keycloak:keycloak-guides-maven-plugin 23.0.6...

org.keycloak:keycloak-guides (23.0.7), org.keycloak:keycloak-guides-maven-plugin (23.0.7) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.7)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.7 - org.keycloak:keycloak-guides-maven-plugin 23.0.7...

org.keycloak:keycloak-guides (18.0.0), org.keycloak:keycloak-guides-maven-plugin (18.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (18.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 18.0.0 - org.keycloak:keycloak-guides-maven-plugin 18.0.0...

org.keycloak:keycloak-guides (22.0.0), org.keycloak:keycloak-guides-maven-plugin (22.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (22.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.0 - org.keycloak:keycloak-guides-maven-plugin 22.0.0...

org.keycloak:keycloak-guides (24.0.0), org.keycloak:keycloak-guides-maven-plugin (24.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (24.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.0 - org.keycloak:keycloak-guides-maven-plugin 24.0.0...

org.keycloak:keycloak-guides (25.0.3), org.keycloak:keycloak-guides-maven-plugin (25.0.3) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (25.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.3 - org.keycloak:keycloak-guides-maven-plugin 25.0.3...

org.keycloak:keycloak-quarkus-server-app (15.0.2), org.keycloak:keycloak-quarkus-server-deployment (15.0.2) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (15.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.2 -...

org.keycloak:keycloak-quarkus-server-app (15.0.0), org.keycloak:keycloak-quarkus-server-deployment (15.0.0) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (15.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.0 -...

org.keycloak:keycloak-guides (24.0.4), org.keycloak:keycloak-guides-maven-plugin (24.0.4) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (24.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.4 - org.keycloak:keycloak-guides-maven-plugin 24.0.4...

Keycloak logs sensitive headers

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern such as the pre-defined 'long' pattern, sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract...

org.keycloak:keycloak-quarkus-server-app (13.0.0), org.keycloak:keycloak-quarkus-server-deployment (13.0.0) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (13.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.0 -...

org.keycloak:keycloak-guides (23.0.0), org.keycloak:keycloak-guides-maven-plugin (23.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.0 - org.keycloak:keycloak-guides-maven-plugin 23.0.0...