org.keycloak:keycloak-dependencies-server-all (24.0.0), org.keycloak:keycloak-dependencies-server-min (24.0.0) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.0)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.0 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-server-all (24.0.1), org.keycloak:keycloak-dependencies-server-min (24.0.1) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.1)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.1 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-api-docs-dist (16.1.1), org.keycloak:keycloak-dependencies-server-all (16.1.1) +2 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (16.1.1)

org.keycloak:keycloak-admin-ui MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-api-docs-dist 16.1.1 - org.keycloak:keycloak-dependencies-server-all 16.1.1 ...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-dependencies-server-min (24.0.4) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-account-ui (24.0.4)

org.keycloak:keycloak-account-ui MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-account-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 -...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.16 Update

New Red Hat build of Keycloak 26.0.16 packages are available from the Customer Portal Red Hat build of Keycloak 26.0.16 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...

Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.16 Images Update

New images are available for Red Hat build of Keycloak 26.0.16 and Red Hat build of Keycloak 26.0.16 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Ha...

keycloak: Keycloak TLS Client-Initiated Renegotiation Denial of Service

A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable...

Exploit for Server-Side Request Forgery in Apache Kafka

Apache Kafka 4.1.0 with Keycloak OAuth2 Authentication Produc...

org.keycloak.testframework:keycloak-test-framework-clustering (26.4.5), org.keycloak.testframework:keycloak-test-framework-core (26.4.5) +22 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.4.5)

org.keycloak:keycloak-model-storage-services MAVEN version 26.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.4.5 -...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=2.7.4-24.0), org.keycloak:keycloak-dependencies-server-all (24.0.2) +6 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.2)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =2.5.6-24.0,...

org.keycloak:keycloak-dependencies-server-all (26.0.5), org.keycloak:keycloak-guides (26.0.5) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.5 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.1) +6 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.1)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =3.0.1-25.0,...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (5.7.3), org.keycloak.testframework:keycloak-test-framework-clustering (26.6.4) +27 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.6.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 5.7.3 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.0.3-25.0, <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.6) +6 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.6)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =4.0.3-25.0,...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.4.3-26.2), org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0, <=26.2.5) +21 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.0.0, <=26.2.5)

org.keycloak:keycloak-model-storage-services MAVEN version =26.0.0, =4.1.0-26.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.0.0, =26.2.5 and more...

org.keycloak:keycloak-dependencies-server-all (26.0.3) potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.3 Source cves:...

org.keycloak.testframework:keycloak-test-framework-clustering (26.4.2), org.keycloak.testframework:keycloak-test-framework-core (26.4.2) +22 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.4.2)

org.keycloak:keycloak-model-storage-services MAVEN version 26.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.4.2 -...

org.keycloak:keycloak-dependencies-server-all (24.0.3), org.keycloak:keycloak-guides (24.0.3) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.3)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.3 -...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-guides (24.0.4) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.4)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 -...