EUVD-2022-6552

Malicious code in bioql PyPI...

EUVD-2022-6962

Malicious code in bioql PyPI...

EUVD-2024-3384

Malicious code in bioql PyPI...

EUVD-2024-1253

Malicious code in bioql PyPI...

EUVD-2022-3301

Malicious code in bioql PyPI...

EUVD-2024-3152

Malicious code in bioql PyPI...

EUVD-2022-6648

Malicious code in bioql PyPI...

EUVD-2024-3342

Malicious code in bioql PyPI...

EUVD-2024-1087

Malicious code in bioql PyPI...

EUVD-2025-23863

Malicious code in bioql PyPI...

EUVD-2023-0967

Malicious code in bioql PyPI...

EUVD-2022-5267

Malicious code in bioql PyPI...

EUVD-2022-0964

Malicious code in bioql PyPI...

EUVD-2022-6533

Malicious code in bioql PyPI...

Keycloak < 26.2.9 Multiple Vulnerabilities (GHSA-wc64-wmfm-46vw)(GHSA-xmcw-mv9p-7pq2)

The version of Keycloak installed on the remote host is prior to 26.2.9. It is, therefore, affected by multiple vulnerabilities as reference in the advisory GHSA-wc64-wmfm-46vw and GHSA-xmcw-mv9p-7pq2. - A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The...

No title provided

A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The previous fix for CVE-2024-10492 did not account for the Windows file separator . As a result, a high-privilege administrator could probe for the existence of files outside the expected realm context through...

keycloak: Keycloak error_description injection on error pages

A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the errordescription query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading...

org.keycloak/keycloak-model-storage-service: Variable injection into environment variables

A flaw was found in org.keycloak/keycloak-model-storage-service. The KeycloakRealmImport custom resource substitutes placeholders within imported realm documents, potentially referencing environment variables. This substitution process allows for injection attacks when crafted realm documents are...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Security Update

New Red Hat build of Keycloak 26.2.9 packages are available from the Customer Portal Red Hat build of Keycloak 26.2.9 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security fixes...

Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Images Security Update

New images are available for Red Hat build of Keycloak 26.2.9 and Red Hat build of Keycloak 26.2.9 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...