org.keycloak.testframework:keycloak-test-framework-core (26.1.0), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.1.0) +17 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.1.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.1.0 -...

EUVD-2025-25456

Keycloak Potential Variable Reference in Model Storage Services...

org.keycloak:keycloak-dependencies-server-all (26.0.4), org.keycloak:keycloak-guides (26.0.4) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.4 -...

org.keycloak:keycloak-dependencies-server-all (26.0.5), org.keycloak:keycloak-guides (26.0.5) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.5 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.4.1), org.keycloak.testframework:keycloak-test-framework-core (26.4.1) +22 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.4.1)

org.keycloak:keycloak-model-storage-services MAVEN version 26.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.4.1 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.4.3-26.2), org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0, <=26.2.5) +21 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.0.0, <=26.2.5)

org.keycloak:keycloak-model-storage-services MAVEN version =26.0.0, =4.1.0-26.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.0.0, =26.2.5 and more...

org.keycloak.testframework:keycloak-test-framework-core (26.2.2), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.2) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.2)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.2 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=5.5.0, <=5.5.1), org.keycloak.testframework:keycloak-test-framework-clustering (26.5.2) +24 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.2)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =5.5.0, =5.5.1 -...

org.keycloak:keycloak-dependencies-server-all (26.0.3) potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.3 Source cves:...

org.keycloak.testframework:keycloak-test-framework-clustering (26.5.6), org.keycloak.testframework:keycloak-test-framework-core (26.5.6) +23 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.6)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.5.6 -...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak...

Keycloak Potential Variable Reference in Model Storage Services

A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...

org.keycloak:keycloak-dependencies-server-all (26.0.1), org.keycloak:keycloak-guides (26.0.1) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.1)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.1 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=5.3.4-26.2, <=5.4.3-26.2), org.keycloak.testframework:keycloak-test-framework-core (26.2.5) +19 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.5)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =5.3.4-26.2,...

org.keycloak.testframework:keycloak-test-framework-clustering (26.5.5), org.keycloak.testframework:keycloak-test-framework-core (26.5.5) +23 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.5)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.5.5 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.4.5), org.keycloak.testframework:keycloak-test-framework-core (26.4.5) +22 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.4.5)

org.keycloak:keycloak-model-storage-services MAVEN version 26.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.4.5 -...

org.keycloak.testframework:keycloak-test-framework-core (26.2.0), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.0) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.0 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.4.3), org.keycloak.testframework:keycloak-test-framework-core (26.4.3) +22 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.4.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.4.3 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.4.6), org.keycloak.testframework:keycloak-test-framework-core (26.4.6) +22 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.4.6)

org.keycloak:keycloak-model-storage-services MAVEN version 26.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.4.6 -...

org.keycloak:keycloak-dependencies-server-all (24.0.3), org.keycloak:keycloak-guides (24.0.3) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.3)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.3 -...