com.kleegroup.accelerator:accelerator-message-keycloakbrevo (>=1.0.1, <=1.0.2), com.kleegroup.accelerator:accelerator-security-keycloakmfa (1.0.1) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (24.0.3)

org.keycloak:keycloak-services MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.kleegroup.accelerator:accelerator-message-keycloakbrevo =1.0.1, =1.4.7, =1.4.8 -...

org.keycloak:keycloak-account-freemarker (1.2.0.beta1), org.keycloak:keycloak-broker-oidc (1.2.0.beta1) +4 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (1.2.0.beta1)

org.keycloak:keycloak-services MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.2.0.beta1 - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-account-freemarker (1.1.0.beta1), org.keycloak:keycloak-dependencies-server-min (1.1.0.beta1) +1 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (1.1.0.beta1)

org.keycloak:keycloak-services MAVEN version 1.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.1.0.beta1 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +13 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (9.0.2)

org.keycloak:keycloak-services MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

org.keycloak:keycloak-dependencies-server-all (23.0.6), org.keycloak:keycloak-guides (23.0.6) +25 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (23.0.6)

org.keycloak:keycloak-saml-core MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.6 - org.keycloak:keycloak-guides 23.0.6 -...

org.keycloak:keycloak-saml-adapter-api-public (4.8.2.final), org.keycloak:keycloak-saml-adapter-core (4.8.2.final) +25 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (4.8.2.final)

org.keycloak:keycloak-saml-core MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.8.2.final -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.0.3-25.0, <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.6) +18 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (25.0.6)

org.keycloak:keycloak-saml-core MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =4.0.3-25.0, =4.0.5-25.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +21 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (12.0.0)

org.keycloak:keycloak-services MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9,...

org.keycloak:keycloak-saml-jetty-adapter-core (23.0.4), org.keycloak:keycloak-saml-jetty94-adapter (23.0.4) +10 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (23.0.4)

org.keycloak:keycloak-saml-adapter-core MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 23.0.4 -...

org.keycloak:keycloak-authz-policy-drools (3.3.0.final), org.keycloak:keycloak-dependencies-server-all (3.3.0.final) +6 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (3.3.0.final)

org.keycloak:keycloak-services MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.final -...

org.keycloak:keycloak-api-docs-dist (15.1.1), org.keycloak:keycloak-dependencies-server-all (15.1.1) +28 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (15.1.1)

org.keycloak:keycloak-saml-core MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 15.1.1 - org.keycloak:keycloak-dependencies-server-all 15.1....

org.keycloak:keycloak-authz-policy-drools (2.5.5.final), org.keycloak:keycloak-dependencies-server-all (2.5.5.final) +5 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (2.5.5.final)

org.keycloak:keycloak-services MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.5.5.final -...

org.keycloak:keycloak-dependencies-server-all (22.0.2), org.keycloak:keycloak-guides (22.0.2) +24 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (22.0.2)

org.keycloak:keycloak-saml-core MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 22.0.2 - org.keycloak:keycloak-guides 22.0.2 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.2.0-alpha.1, <=1.2.0-beta.1), org.keycloak:keycloak-account-freemarker (1.7.0.final) +10 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (1.7.0.final)

org.keycloak:keycloak-services MAVEN version 1.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.2.0-alpha.1, =1.2.0-beta.1 -...

org.keycloak:keycloak-authz-policy-drools (3.4.1.cr1), org.keycloak:keycloak-dependencies-server-all (3.4.1.cr1) +6 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (3.4.1.cr1)

org.keycloak:keycloak-services MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.1.cr1 -...

org.keycloak:keycloak-saml-jetty-adapter-core (3.2.0.final), org.keycloak:keycloak-saml-jetty81-adapter (3.2.0.final) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (3.2.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 3.2.0.final -...

fr.cnieg.keycloak:attribute-login-provider (>=1.3.0, <=1.3.1), io.teragroup.keycloak.extension:migration (>=19.0.3.1, <=19.0.3.2) +25 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (19.0.3)

org.keycloak:keycloak-services MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.0, =19.0.3.1, =1.11, =1.11, =1.11, =1.11, =1.11,...

fr.cnieg.keycloak:attribute-login-provider (1.3.4), io.phasetwo.keycloak:keycloak-orgs (>=0.24, <=0.27) +25 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (21.0.2)

org.keycloak:keycloak-services MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.4 - io.phasetwo.keycloak:keycloak-orgs =0.24, =2.5,...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +111 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (>=26.0.0, <=26.5.3)

org.keycloak:keycloak-services MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =1.0.0, =4.1.0-26.0, =4.1.0-26.0, =2.0.0-26.0, =2.6.0 and more Source cves: CVE-2026-2575 Source advisory: OSV:GHSA-XV6H-R36F-3GP5...

org.keycloak:keycloak-dependencies-server-all (6.0.0), org.keycloak:keycloak-saml-adapter-api-public (6.0.0) +27 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (6.0.0)

org.keycloak:keycloak-saml-core MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 6.0.0 - org.keycloak:keycloak-saml-adapter-api-publ...