org.keycloak:keycloak-authz-policy-common (4.7.0.final), org.keycloak:keycloak-dependencies-server-min (4.7.0.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.7.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.7.0.final -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.3), com.github.vzakharchenko:cisco-radius-plugin (1.4.3) +32 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (17.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.3 -...

org.fintrace:keycloak-event-receiver-common (0.0.1), org.fintrace:keycloak-event-receiver-http (0.0.1) +11 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.0.0.beta1)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.fintrace:keycloak-event-receiver-common 0.0.1 -...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.2.2), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.2.2) +64 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (23.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.2.2 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +31 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (15.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +32 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (15.1.0)

org.keycloak:keycloak-server-spi-private MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.7), com.github.vzakharchenko:cisco-radius-plugin (1.3.7) +31 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (13.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.7 -...

org.keycloak:keycloak-account-freemarker (1.0.1.final), org.keycloak:keycloak-dependencies-server-all (1.0.1.final) +3 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.0.1.final)

org.keycloak:keycloak-services MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.1.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.keycloak:keycloak-account-freemarker (1.0-rc-1) +4 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.0-rc-1)

org.keycloak:keycloak-services MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +153 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.5.4)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =0.0.0, =13.10.0.release and more Source cves: CVE-2026-2603 Source advisory: GHSA-X4P7-7CHP-64HQ...

io.github.johnjcool:keycloak-cas-services (>=4.2.0.final, <=4.2.1.final), org.keycloak:keycloak-authz-policy-common (4.2.0.final) +10 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.2.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.2.0.final, =4.2.1.final -...

org.keycloak:keycloak-authz-policy-drools (3.4.0.final), org.keycloak:keycloak-dependencies-server-all (3.4.0.final) +6 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (3.4.0.final)

org.keycloak:keycloak-services MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.0.final -...

org.keycloak:keycloak-authz-policy-common (4.8.1.final), org.keycloak:keycloak-dependencies-server-min (4.8.1.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.8.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.8.1.final -...

org.keycloak:keycloak-authz-policy-drools (3.3.0.final), org.keycloak:keycloak-dependencies-server-all (3.3.0.final) +6 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (3.3.0.final)

org.keycloak:keycloak-services MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.final -...

org.keycloak:keycloak-authz-policy-common (2.5.4.final), org.keycloak:keycloak-authz-policy-drools (2.5.4.final) +12 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (2.5.4.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.4.final -...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=4.0.3-25.0, <=4.0.5-25.0) +33 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (25.0.6)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - ch.iterial.keycloak.plugins:keycloak-directus-plugin =0.1.0, =4.0.3-25.0,...

city.smartb.i2:keycloak-plugin-domain (>=0.10.4, <=0.10.5-experimental), com.github.vzakharchenko:chillispot-radius-plugin (1.4.4) +41 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (18.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - city.smartb.i2:keycloak-plugin-domain =0.10.4, =0.1, =1.0, =1.1, =1.3, =1.4 -...

com.abavilla:fpi-framework-core (>=1.6.2, <=1.6.4), com.abavilla:fpi-framework-pom (>=1.6.2, <=1.6.4) +88 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (20.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-framework-core =1.6.2, =1.6.2, =0.4.7-20.0.3, =0.4.7-20.0.3,...

com.charlyghislain.keycloak:keycloak-importexport (19.0.0), com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.7, <=1.4.8) +41 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (19.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 19.0.0 -...

com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), fr.cnieg.keycloak:attribute-login-provider (>=1.1.0, <=1.2.4) +16 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (11.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =1.1.0, =1.2.4 -...