org.keycloak:keycloak-guides (18.0.1), org.keycloak:keycloak-guides-maven-plugin (18.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (18.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 18.0.1 - org.keycloak:keycloak-guides-maven-plugin 18.0.1...

org.keycloak:keycloak-guides (24.0.1), org.keycloak:keycloak-guides-maven-plugin (24.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (24.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.1 - org.keycloak:keycloak-guides-maven-plugin 24.0.1...

org.keycloak:keycloak-guides (19.0.3), org.keycloak:keycloak-guides-maven-plugin (19.0.3) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (19.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.3 - org.keycloak:keycloak-guides-maven-plugin 19.0.3...

org.keycloak:keycloak-quarkus-server-app (15.0.2), org.keycloak:keycloak-quarkus-server-deployment (15.0.2) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (15.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.2 -...

org.keycloak:keycloak-guides (19.0.1), org.keycloak:keycloak-guides-maven-plugin (19.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (19.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.1 - org.keycloak:keycloak-guides-maven-plugin 19.0.1...

org.keycloak:keycloak-guides (23.0.0), org.keycloak:keycloak-guides-maven-plugin (23.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.0 - org.keycloak:keycloak-guides-maven-plugin 23.0.0...

org.keycloak:keycloak-quarkus-server-app (13.0.0), org.keycloak:keycloak-quarkus-server-deployment (13.0.0) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (13.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.0 -...

org.keycloak:keycloak-guides (23.0.6), org.keycloak:keycloak-guides-maven-plugin (23.0.6) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.6)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.6 - org.keycloak:keycloak-guides-maven-plugin 23.0.6...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-guides (21.1.0) +4 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (21.1.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-guides 21.1.0 ...

io.kokuwa.keycloak:keycloak-event-metrics (1.0.0), org.keycloak:keycloak-guides (21.1.1) +4 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (21.1.1)

org.keycloak:keycloak-quarkus-server MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 1.0.0 - org.keycloak:keycloak-guides 21.1.1 ...

org.keycloak:keycloak-guides (20.0.0), org.keycloak:keycloak-guides-maven-plugin (20.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (20.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.0 - org.keycloak:keycloak-guides-maven-plugin 20.0.0...

org.keycloak:keycloak-guides (25.0.3), org.keycloak:keycloak-guides-maven-plugin (25.0.3) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (25.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.3 - org.keycloak:keycloak-guides-maven-plugin 25.0.3...

org.keycloak:keycloak-guides (22.0.0), org.keycloak:keycloak-guides-maven-plugin (22.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (22.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.0 - org.keycloak:keycloak-guides-maven-plugin 22.0.0...

org.keycloak:keycloak-guides (16.0.0), org.keycloak:keycloak-guides-maven-plugin (16.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (16.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 16.0.0 - org.keycloak:keycloak-guides-maven-plugin 16.0.0...

org.keycloak:keycloak-guides (18.0.2), org.keycloak:keycloak-guides-maven-plugin (18.0.2) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (18.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 18.0.2 - org.keycloak:keycloak-guides-maven-plugin 18.0.2...

org.keycloak:keycloak-guides (17.0.1), org.keycloak:keycloak-guides-maven-plugin (17.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (17.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 17.0.1 - org.keycloak:keycloak-guides-maven-plugin 17.0.1...

Keycloak logs sensitive headers

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern such as the pre-defined 'long' pattern, sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract...

CVE-2025-11537

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern such as the pre-defined 'long' pattern, sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract...

CVE-2025-11537

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern such as the pre-defined 'long' pattern, sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract...

CVE-2025-11537

In CVE-2025-11537, a flaw in Keycloak causes sensitive headers (Authorization and Cookie) to be logged when the logging format uses verbose templates (e.g., the predefined 'long' pattern). An attacker with read access to log files can extract credentials (bearer tokens, session cookies) and imper...