org.keycloak:keycloak-guides (24.0.5), org.keycloak:keycloak-guides-maven-plugin (24.0.5) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (24.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.5 - org.keycloak:keycloak-guides-maven-plugin 24.0.5...

org.keycloak:keycloak-guides (20.0.1), org.keycloak:keycloak-guides-maven-plugin (20.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (20.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.1 - org.keycloak:keycloak-guides-maven-plugin 20.0.1...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-guides (21.1.0) +4 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (21.1.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-guides 21.1.0 ...

org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin 23.0.3...

org.keycloak:keycloak-guides (23.0.6), org.keycloak:keycloak-guides-maven-plugin (23.0.6) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.6)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.6 - org.keycloak:keycloak-guides-maven-plugin 23.0.6...

org.keycloak:keycloak-quarkus-server-app (13.0.1), org.keycloak:keycloak-quarkus-server-deployment (13.0.1) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (13.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.1 -...

org.keycloak:keycloak-guides (24.0.0), org.keycloak:keycloak-guides-maven-plugin (24.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (24.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.0 - org.keycloak:keycloak-guides-maven-plugin 24.0.0...

org.keycloak:keycloak-quarkus-server-app (12.0.3), org.keycloak:keycloak-quarkus-server-deployment (12.0.3) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (12.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.3 -...

io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=0.2.0), org.keycloak:keycloak-guides (21.0.1) +4 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (21.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics =0.1.0, =0.2.0 - org.keycloak:keycloak-guide...

org.keycloak:keycloak-guides (20.0.0), org.keycloak:keycloak-guides-maven-plugin (20.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (20.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.0 - org.keycloak:keycloak-guides-maven-plugin 20.0.0...

GHSA-GV3V-2CPP-3PMQ Keycloak logs sensitive headers

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern such as the pre-defined 'long' pattern, sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract...

org.keycloak:keycloak-quarkus-server-app (12.0.4), org.keycloak:keycloak-quarkus-server-deployment (12.0.4) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (12.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.4 -...

org.keycloak:keycloak-guides (19.0.1), org.keycloak:keycloak-guides-maven-plugin (19.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (19.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.1 - org.keycloak:keycloak-guides-maven-plugin 19.0.1...

org.keycloak:keycloak-quarkus-server-app (15.0.2), org.keycloak:keycloak-quarkus-server-deployment (15.0.2) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (15.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.2 -...

Keycloak logs sensitive headers

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern such as the pre-defined 'long' pattern, sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract...

org.keycloak:keycloak-quarkus-server-app (13.0.0), org.keycloak:keycloak-quarkus-server-deployment (13.0.0) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (13.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.0 -...

org.keycloak:keycloak-guides (24.0.4), org.keycloak:keycloak-guides-maven-plugin (24.0.4) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (24.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.4 - org.keycloak:keycloak-guides-maven-plugin 24.0.4...

org.keycloak:keycloak-guides (23.0.0), org.keycloak:keycloak-guides-maven-plugin (23.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.0 - org.keycloak:keycloak-guides-maven-plugin 23.0.0...

CVE-2025-11537

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern such as the pre-defined 'long' pattern, sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract...

CVE-2025-11537 Keycloak-services: sensitive headers shown in the http access logs

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern such as the pre-defined 'long' pattern, sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract...