org.keycloak:keycloak-saml-as7-adapter-dist (4.3.0.final), org.keycloak:keycloak-saml-as7-modules (4.3.0.final) +24 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (4.3.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 4.3.0.final -...

org.keycloak:keycloak-broker-saml (1.2.0.final), org.keycloak:keycloak-dependencies-server-all (1.2.0.final) +1 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.2.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.2.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-broker-saml (1.6.0.final), org.keycloak:keycloak-dependencies-server-all (1.6.0.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.6.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.6.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (1.9.8.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.8.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.9.8.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (15.1.1), org.keycloak:keycloak-saml-jetty92-adapter (15.1.1) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (15.1.1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 15.1.1 -...

org.keycloak:keycloak-saml-jetty-adapter-core (18.0.1), org.keycloak:keycloak-saml-jetty92-adapter (18.0.1) +16 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (18.0.1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 18.0.1 -...

org.keycloak:keycloak-broker-saml (1.4.0.final), org.keycloak:keycloak-dependencies-server-all (1.4.0.final) +1 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.4.0.final - org.keycloak:keycloak-dependencies-server-a...

org.bedework.deploy:bw-wf-feature-pack (>=4.1.0, <=5.0.0), org.bedework.deploy:bw-wf-keycloak-saml-filter-feature-pack (>=4.0.3, <=5.0.0) +39 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (>=1.6.0.final, <=26.5.3)

org.keycloak:keycloak-saml-adapter-core MAVEN version =1.6.0.final, =4.1.0, =4.0.3, =21.1.0, =3.4.2.final, =3.4.2.final, =11.0.0, =21.1.0, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =2.1.0.cr1, =2.1.0.cr1, =18.0.2 and more Source cves: CVE-2026-2575 Source...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.1.0-beta.2), org.keycloak:keycloak-account-freemarker (1.2.0.final) +9 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.2.0.final)

org.keycloak:keycloak-services MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.1.0-beta.2 -...

CVE-2026-3047

A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language SAML client is configured as an Identity Provider IdP-initiated broker landing target, it can still complete the login process and establish a Single Sign-On SSO session. This allows a remote attacker...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the SAMLRequest DEFLATE decompression. An attacker can cause service disruption...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the SAMLRequest DEFLATE decompression. An attacker can cause service disruption by sending a highly compressed requests that trigger excessive resource consumption durin...

io.quarkus:quarkus-keycloak-admin-client (>=3.2.8.final, <=3.6.1), io.quarkus:quarkus-keycloak-admin-client-deployment (>=3.2.8.final, <=3.6.1) +6 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (22.0.5)

org.keycloak:keycloak-adapter-core MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - io.quarkus:quarkus-keycloak-admin-client =3.2.8.final, =3.2.8.final, =3.2.8.final, =0.0.17...

EUVD-2019-0650

Malware in sbrugna...

EUVD-2022-5865

Malicious code in bioql PyPI...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.1.0-beta.2), org.keycloak:keycloak-account-freemarker (1.2.0.final) +9 more potentially affected by CVE-2025-2559 via org.keycloak:keycloak-services (1.2.0.final)

org.keycloak:keycloak-services MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.1.0-beta.2 -...

net.welen.wildfly-jmx-cli:wildfly-jmx-cli (1.3.0), org.keycloak:keycloak-saml-wildfly-jakarta-subsystem (>=22.0.2, <=25.0.6) +93 more potentially affected by CVE-2025-23367 via org.wildfly.core:wildfly-server (21.1.0.final)

org.wildfly.core:wildfly-server MAVEN version 21.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-server and may be impacted: - net.welen.wildfly-jmx-cli:wildfly-jmx-cli 1.3.0 -...

org.keycloak:keycloak-dependencies-server-all (3.4.0.final), org.keycloak:keycloak-saml-adapter-api-public (3.4.0.final) +26 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (3.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.4.0.final -...

org.keycloak:keycloak-api-docs-dist (15.0.1), org.keycloak:keycloak-dependencies-server-all (15.0.1) +30 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (15.0.1)

org.keycloak:keycloak-saml-core MAVEN version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 15.0.1 - org.keycloak:keycloak-dependencies-server-all 15.0....

org.keycloak:keycloak-broker-saml (1.6.1.final), org.keycloak:keycloak-dependencies-server-all (1.6.1.final) +19 more potentially affected by CVE-2024-8698 via org.keycloak:keycloak-saml-core (1.6.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.6.1.final - org.keycloak:keycloak-dependencies-server-a...