de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.2.2), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.2.2) +64 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (23.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.2.2 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.1), org.keycloak:keycloak-adapter-core (23.0.5) +46 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (23.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.1 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (3.0.0), de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (>=2.0.13, <=2.3.1) +64 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (23.0.6)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 3.0.0 -...

com.kleegroup.accelerator:accelerator-message-keycloakbrevo (>=1.0.1, <=1.0.2), com.kleegroup.accelerator:accelerator-security-keycloakmfa (1.0.1) +53 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (24.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.kleegroup.accelerator:accelerator-message-keycloakbrevo =1.0.1,...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (>=2.3.4, <=2.8.1), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (>=2.3.4, <=2.8.0) +66 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (25.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak =2.3.4, =2.3.4,...

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-authz-policy-common (25.0.5) +23 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (25.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +147 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.5.1)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =2.0.0 and more Source cves: CVE-2026-0871 Source advisory: OSV:GHSA-V4JW-M6RM-399H...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +35 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (13.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

org.keycloak:keycloak-authz-policy-common (4.0.0.beta3), org.keycloak:keycloak-dependencies-server-min (4.0.0.beta3) +9 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (4.0.0.beta3)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.0.0.beta3 -...

org.keycloak:keycloak-authz-policy-common (11.0.1), org.keycloak:keycloak-dependencies-server-all (11.0.1) +13 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (11.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 11.0.1 -...

io.github.johnjcool:keycloak-cas-services (4.8.3.final), it.vige:school-keycloak-rooms (>=1.2.2, <=1.3.0) +11 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (4.8.3.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.8.3.final -...

org.keycloak:keycloak-authz-policy-drools (8.0.0), org.keycloak:keycloak-dependencies-server-all (8.0.0) +7 more potentially affected by CVE-2025-12150 via org.keycloak:keycloak-services (8.0.0)

org.keycloak:keycloak-services MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 8.0.0 - org.keycloak:keycloak-dependencies-server-all 8.0...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.0.2, <=1.1.0-alpha.1), org.keycloak:keycloak-account-freemarker (1.0.4.final) +4 more potentially affected by CVE-2025-12150 via org.keycloak:keycloak-services (1.0.4.final)

org.keycloak:keycloak-services MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.0.2, =1.1.0-alpha.1 -...

org.keycloak:keycloak-authz-policy-drools (3.4.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.4.0.cr1) +6 more potentially affected by CVE-2025-12150 via org.keycloak:keycloak-services (3.4.0.cr1)

org.keycloak:keycloak-services MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.0.cr1 -...

org.keycloak:keycloak-account-freemarker (1.0.3.final), org.keycloak:keycloak-dependencies-server-all (1.0.3.final) +3 more potentially affected by CVE-2025-12150 via org.keycloak:keycloak-services (1.0.3.final)

org.keycloak:keycloak-services MAVEN version 1.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.3.final -...

org.keycloak:keycloak-authz-policy-drools (3.2.1.final), org.keycloak:keycloak-dependencies-server-all (3.2.1.final) +6 more potentially affected by CVE-2025-12150 via org.keycloak:keycloak-services (3.2.1.final)

org.keycloak:keycloak-services MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.2.1.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.1), org.keycloak:keycloak-account-freemarker (1.0-final) +4 more potentially affected by CVE-2025-12150 via org.keycloak:keycloak-services (1.0-final)

org.keycloak:keycloak-services MAVEN version 1.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.1 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.4), io.phasetwo.keycloak:keycloak-events (>=0.27, <=0.28) +50 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (24.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.4 -...

org.keycloak:keycloak-forms (1.0-alpha-1-12062013), org.keycloak:keycloak-server (1.0-alpha-1-12062013) potentially affected by CVE-2025-12150 via org.keycloak:keycloak-services (1.0-alpha-1-12062013)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1-12062013 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1-12062013 - org.keycloak:keycloak-server...

org.keycloak:keycloak-dependencies-server-all (11.0.1), org.keycloak:keycloak-dependencies-server-min (11.0.1) +6 more potentially affected by CVE-2025-12150 via org.keycloak:keycloak-services (11.0.1)

org.keycloak:keycloak-services MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.1 - org.keycloak:keycloak-dependencies-server-m...