org.keycloak:keycloak-authz-policy-common (3.2.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.2.0.cr1) +13 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.2.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.2.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (3.3.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.3.0.cr1) +13 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.3.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (2.4.0.cr1), org.keycloak:keycloak-authz-policy-drools (2.4.0.cr1) +12 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (2.4.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 2.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.4.0.cr1 -...

org.fintrace:keycloak-event-receiver-common (0.0.1), org.fintrace:keycloak-event-receiver-http (0.0.1) +11 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (4.0.0.beta1)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.fintrace:keycloak-event-receiver-common 0.0.1 -...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final), org.keycloak:keycloak-authz-policy-common (4.1.0.final) +10 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (4.1.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final -...

com.backpackcloud:keycloak-http-forwarder (0.1.0), com.github.vzakharchenko:keycloak-plugins (1.2.3) +22 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (9.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.backpackcloud:keycloak-http-forwarder 0.1.0 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +20 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (9.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 -...

net.micedre.keycloak:keycloak-mail-whitelisting (1.5), org.keycloak:keycloak-authz-policy-common (19.0.0) +26 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (19.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - net.micedre.keycloak:keycloak-mail-whitelisting 1.5 -...

com.kleegroup.accelerator:accelerator-message-keycloakbrevo (>=1.0.1, <=1.0.2), com.kleegroup.accelerator:accelerator-security-keycloakmfa (1.0.1) +53 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (24.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.kleegroup.accelerator:accelerator-message-keycloakbrevo =1.0.1,...

Access Control Bypass

Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Access Control Bypass due to the DefaultAttributes attribute filtering in the user profile...

org.keycloak:keycloak-authz-policy-common (3.2.0.final), org.keycloak:keycloak-authz-policy-drools (3.2.0.final) +13 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.2.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.2.0.final -...

io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-magic-link (>=0.16, <=0.19) +56 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (22.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.16, =0.37, =0.9, =1.6, =2.1 -...

org.keycloak:keycloak-authz-policy-common (3.4.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.4.0.cr1) +13 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (3.4.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.0.cr1 -...

io.github.kilmajster:keycloak-username-password-attribute-authenticator (0.2.0), org.keycloak:authenticator-required-action-example (15.1.1) +25 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (15.1.1)

org.keycloak:keycloak-server-spi-private MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.kilmajster:keycloak-username-password-attribute-authenticator 0.2.0 ...

org.eclipse.dirigible:dirigible-server-spring (7.1.5), org.eclipse.dirigible:dirigible-spring-services (7.1.5) +44 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (20.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.eclipse.dirigible:dirigible-server-spring 7.1.5 -...

cn.sparrowmini:sparrow-keycloak-adapter (>=0.0.1, <=0.0.2), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.10.9-21.1.1, <=0.11.4-21.1.1) +78 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (21.1.1)

org.keycloak:keycloak-server-spi-private MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - cn.sparrowmini:sparrow-keycloak-adapter =0.0.1, =0.10.9-21.1.1, =0.10.9-21.1.1...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.16), com.github.vzakharchenko:cisco-radius-plugin (1.3.16) +32 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (16.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.16 -...

de.adorsys.sts:keycloak-storage-provider (>=1.1.23, <=1.1.28), io.phasetwo.keycloak:keycloak-events (0.20) +61 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (22.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.1.23, =0.20, =0.12, =8.16.0,...

dk.grinn.keycloak:keycloak-migrate-resource (11.0.3.0), dk.grinn.keycloak:keycloak-migrate-spi (11.0.3.0) +17 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (11.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - dk.grinn.keycloak:keycloak-migrate-resource 11.0.3.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +32 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (15.1.0)

org.keycloak:keycloak-server-spi-private MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...