Replay Attack

Overview org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak. Affected versions of this package are vulnerable to Replay Attack through IdP-initiated broker logins in the services/src/main/java/org/keycloak/broker/saml component. An attacker can hijack a user...

Improper Handling of Extra Parameters

Overview org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak. Affected versions of this package are vulnerable to Improper Handling of Extra Parameters through the generateRedirectUri logic in org.keycloak.saml.BaseSAML2BindingBuilder. An attacker can cause a...

org.keycloak:keycloak-dependencies-server-all (20.0.4), org.keycloak:keycloak-guides (20.0.4) +14 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (20.0.4)

org.keycloak:keycloak-saml-core MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.4 - org.keycloak:keycloak-guides 20.0.4 -...

org.keycloak:keycloak-dependencies-server-all (8.0.1), org.keycloak:keycloak-saml-adapter-api-public (8.0.1) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (8.0.1)

org.keycloak:keycloak-saml-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.1 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-saml-adapter-api-public (3.2.1.final) +26 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (3.2.1.final)

org.keycloak:keycloak-saml-core MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-saml-adapter-api-public (11.0.2) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (11.0.2)

org.keycloak:keycloak-saml-core MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0), de.arbeitsagentur.opdt:keycloak-extension-bundid (1.0.0-25.0) +19 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (25.0.1)

org.keycloak:keycloak-saml-core MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =3.0.1-25.0, =4.0.1-25.0 -...

org.keycloak:keycloak-dependencies-server-all (3.0.0.final), org.keycloak:keycloak-saml-adapter-api-public (3.0.0.final) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (3.0.0.final)

org.keycloak:keycloak-saml-core MAVEN version 3.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.0.0.final -...

org.keycloak:keycloak-broker-saml (1.7.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.7.0.cr1) +19 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.7.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.7.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-broker-saml (1.4.0.final), org.keycloak:keycloak-dependencies-server-all (1.4.0.final) +1 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.4.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2), org.keycloak:keycloak-saml-adapter-api-public (3.3.0.cr2) +26 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (3.3.0.cr2)

org.keycloak:keycloak-saml-core MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.cr2 -...

io.kokuwa.keycloak:keycloak-event-metrics (1.0.0), net.optionfactory.keycloak:optionfactory-keycloak-cie (>=2.14, <=2.16) +27 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (21.1.1)

org.keycloak:keycloak-saml-core MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 1.0.0 -...

org.keycloak:keycloak-saml-adapter-api-public (3.4.2.final), org.keycloak:keycloak-saml-adapter-core (3.4.2.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (3.4.2.final)

org.keycloak:keycloak-saml-core MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 3.4.2.final -...

org.keycloak:keycloak-broker-saml (1.5.0.final), org.keycloak:keycloak-dependencies-server-all (1.5.0.final) +1 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.5.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.5.0.final - org.keycloak:keycloak-dependencies-server-a...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.4) +18 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (25.0.4)

org.keycloak:keycloak-saml-core MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 4.0.2-25.0 -...

org.keycloak:keycloak-dependencies-server-all (6.0.0), org.keycloak:keycloak-saml-adapter-api-public (6.0.0) +27 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (6.0.0)

org.keycloak:keycloak-saml-core MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 6.0.0 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-api-docs-dist (15.0.1), org.keycloak:keycloak-dependencies-server-all (15.0.1) +30 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (15.0.1)

org.keycloak:keycloak-saml-core MAVEN version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 15.0.1 - org.keycloak:keycloak-dependencies-server-all 15.0....

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.0.3-25.0, <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.6) +18 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (25.0.6)

org.keycloak:keycloak-saml-core MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =4.0.3-25.0, =4.0.5-25.0 -...

org.keycloak:keycloak-saml-adapter-api-public (4.3.0.final), org.keycloak:keycloak-saml-adapter-core (4.3.0.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.3.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (24.0.0), org.keycloak:keycloak-guides (24.0.0) +24 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (24.0.0)

org.keycloak:keycloak-saml-core MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.0 - org.keycloak:keycloak-guides 24.0.0 -...