de.adorsys.multibanking:keycloak-custom-secret-provider (>=1.3.0, <=1.20), org.keycloak:keycloak-authz-policy-common (3.1.0.final) +12 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.1.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.multibanking:keycloak-custom-secret-provider =1.3.0, =1.20 -...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +153 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.5.5)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =0.0.0, =13.10.0.release and more Source cves: CVE-2026-3190 Source advisory: GHSA-Q35R-VVHV-VX5H...

com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), fr.cnieg.keycloak:attribute-login-provider (>=1.1.0, <=1.2.4) +16 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (11.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =1.1.0, =1.2.4 -...

org.keycloak:keycloak-authz-policy-common (3.0.0.final), org.keycloak:keycloak-authz-policy-drools (3.0.0.final) +11 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.0.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.0.0.final -...

com.kleegroup.accelerator:accelerator-message-keycloakbrevo (>=1.0.1, <=1.0.2), com.kleegroup.accelerator:accelerator-security-keycloakmfa (1.0.1) +53 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (24.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.kleegroup.accelerator:accelerator-message-keycloakbrevo =1.0.1,...

org.keycloak:keycloak-account-freemarker (1.0.1.final), org.keycloak:keycloak-dependencies-server-all (1.0.1.final) +3 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (1.0.1.final)

org.keycloak:keycloak-services MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.1.final -...

org.keycloak:keycloak-account-freemarker (1.0.2.final), org.keycloak:keycloak-dependencies-server-all (1.0.2.final) +3 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (1.0.2.final)

org.keycloak:keycloak-services MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.2.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.1), org.keycloak:keycloak-account-freemarker (1.0-final) +4 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (1.0-final)

org.keycloak:keycloak-services MAVEN version 1.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.1 -...

org.keycloak:keycloak-dependencies-server-all (1.0.1.final), org.keycloak:keycloak-server (1.0.1.final) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (1.0.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0.1.final - org.keycloak:keycloak-server...

de.adorsys.sts:keycloak-storage-provider (0.29.0), dk.grinn.keycloak:keycloak-migrate-resource (0.0.5) +17 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (5.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.sts:keycloak-storage-provider 0.29.0 -...

org.keycloak:keycloak-authz-policy-common (3.3.0.cr2), org.keycloak:keycloak-authz-policy-drools (3.3.0.cr2) +13 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.3.0.cr2)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.cr2 -...

org.keycloak:keycloak-authz-policy-common (3.4.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.4.0.cr1) +13 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.4.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.0.cr1 -...

org.keycloak:keycloak-account-freemarker (1.3.0.final), org.keycloak:keycloak-broker-oidc (1.3.0.final) +10 more potentially affected by CVE-2026-3121 via org.keycloak:keycloak-services (1.3.0.final)

org.keycloak:keycloak-services MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.3.0.final - org.keycloak:keycloak-broker-oidc...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +38 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (18.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 -...

org.keycloak:keycloak-authz-policy-common (4.8.2.final), org.keycloak:keycloak-dependencies-server-min (4.8.2.final) +9 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (4.8.2.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.8.2.final -...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +387 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (>=2.4.0.cr1, <=26.5.5)

org.keycloak:keycloak-server-spi-private MAVEN version =2.4.0.cr1, =0.1.0, =0.11.0, =0.10.4, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.0.28 and more Source cves: CVE-2026-3190 Source advisory: MEND:CVE-2026-3190...

org.keycloak:keycloak-account-freemarker (1.0.3.final), org.keycloak:keycloak-dependencies-server-all (1.0.3.final) +3 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (1.0.3.final)

org.keycloak:keycloak-services MAVEN version 1.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.3.final -...

org.keycloak:keycloak-account-freemarker (1.0-rc-2), org.keycloak:keycloak-dependencies-server-all (1.0-rc-2) +3 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (1.0-rc-2)

org.keycloak:keycloak-services MAVEN version 1.0-rc-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-rc-2 - org.keycloak:keycloak-dependencies-server-al...

org.keycloak:keycloak-authz-policy-drools (3.2.0.final), org.keycloak:keycloak-dependencies-server-all (3.2.0.final) +6 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (3.2.0.final)

org.keycloak:keycloak-services MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.2.0.final -...

org.keycloak:keycloak-account-freemarker (1.0.1.final), org.keycloak:keycloak-dependencies-server-all (1.0.1.final) +3 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (1.0.1.final)

org.keycloak:keycloak-services MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.1.final -...