ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +170 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.6.2)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =13.10.0.release and more Source cves: CVE-2026-9791 Source advisory: SNYK:JAVA-ORGKEYCLOAK-17135833...

org.keycloak:keycloak-authz-policy-common (2.4.0.final), org.keycloak:keycloak-authz-policy-drools (2.4.0.final) +12 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (2.4.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.4.0.final -...

org.keycloak:keycloak-authz-policy-common (2.4.0.cr1), org.keycloak:keycloak-authz-policy-drools (2.4.0.cr1) +12 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (2.4.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 2.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.4.0.cr1 -...

com.jalalkiswani:jk-app-service (>=7.0.0-m3, <=7.0.0-m7), com.jalalkiswani:jk-app-web (>=7.0.0-m2, <=7.0.0-m7) +72 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (20.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.jalalkiswani:jk-app-service =7.0.0-m3, =7.0.0-m2, =7.0.0-m2, =7.0.0-m3,...

com.ritense.valtimo:keycloak-iam (>=9.26.1.release, <=9.26.2.release), de.arbeitsagentur.opdt:keycloak-cassandra-extension (0.4.5-20.0.2) +63 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (20.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.ritense.valtimo:keycloak-iam =9.26.1.release, =2.0.5, =2.0.5, =2.0.5,...

org.eclipse.dirigible:dirigible-server-spring (7.1.5), org.eclipse.dirigible:dirigible-spring-services (7.1.5) +44 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (20.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.eclipse.dirigible:dirigible-server-spring 7.1.5 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.8.3-20.0.5, <=0.10.0-20.0.5), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=0.8.3-20.0.5, <=0.10.0-20.0.5) +55 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (20.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =0.8.3-20.0.5,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.11), com.github.vzakharchenko:cisco-radius-plugin (1.4.11) +62 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (21.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.11 -...

com.abavilla:fpi-bot-api (>=1.5.1, <=1.5.4), com.abavilla:fpi-bot-api-parent (>=1.5.1, <=1.5.4) +103 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (21.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-bot-api =1.5.1, =1.5.1, =1.7.0, =1.7.0, =1.5.2, =1.5.2, =1.7....

com.abavilla:fpi-bot-api (>=1.6.0, <=1.8.0), com.abavilla:fpi-bot-api-parent (>=1.6.0, <=1.8.0) +88 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (21.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-bot-api =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8....

com.ritense.valtimo:keycloak-iam (>=10.6.0.release, <=11.3.5.release), com.ritense.valtimo:valtimo-dependencies (>=10.6.0.release, <=11.3.5.release) +63 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (21.1.0)

org.keycloak:keycloak-server-spi-private MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.ritense.valtimo:keycloak-iam =10.6.0.release, =10.6.0.release, =0.126,...

cn.sparrowmini:sparrow-keycloak-adapter (>=0.0.1, <=0.0.2), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=0.10.9-21.1.1, <=0.11.4-21.1.1) +78 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (21.1.1)

org.keycloak:keycloak-server-spi-private MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - cn.sparrowmini:sparrow-keycloak-adapter =0.0.1, =0.10.9-21.1.1, =0.10.9-21.1.1...

org.keycloak:keycloak-authz-policy-common (2.5.0.cr1), org.keycloak:keycloak-authz-policy-drools (2.5.0.cr1) +12 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (2.5.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.0.cr1 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (2.0.0), fr.cnieg.keycloak:attribute-login-provider (1.3.5) +59 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (21.1.2)

org.keycloak:keycloak-server-spi-private MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 2.0.0 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=1.1.0-22.0.1, <=1.3.2-22.0.1), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=1.1.0-22.0.1, <=1.3.2-22.0.1) +73 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (22.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =1.1.0-22.0.1,...

fr.cnieg.keycloak:attribute-login-provider (1.3.7), org.keycloak:keycloak-adapter-core (22.0.2) +50 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (22.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.7 -...

com.jalalkiswani:j-app-service (>=7.0.0-pre-release, <=7.0.2), com.jalalkiswani:j-app-web (>=7.0.0-pre-release, <=7.0.2) +84 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (22.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.jalalkiswani:j-app-service =7.0.0-pre-release, =7.0.0-pre-release,...

de.adorsys.sts:keycloak-storage-provider (>=1.1.23, <=1.1.28), io.phasetwo.keycloak:keycloak-events (0.20) +61 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (22.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.1.23, =0.20, =0.12, =8.16.0,...

fr.cnieg.keycloak:attribute-login-provider (>=1.3.9, <=1.3.10), io.phasetwo.keycloak:keycloak-events (>=0.21, <=0.22) +41 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (22.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.9, =0.21, =0.44, =3.2.8.final,...

dev.jcputney:keycloak-theme-additional-info-extension (>=1.1.4, <=1.1.5), org.eclipse.dirigible:dirigible-application (8.18.9) +47 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (23.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - dev.jcputney:keycloak-theme-additional-info-extension =1.1.4, =1.1.5 -...