GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...

CVE-2026-41852 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, camunda, jenkins, camunda-zeebe, kafbat-ui-fips, zipkin, keycloak-config-cli, apache-activemq, apache-activemq-fips...

CVE-2026-41851 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, camunda, jenkins, camunda-zeebe, kafbat-ui-fips, zipkin, keycloak-config-cli, apache-activemq, apache-activemq-fips...

GHSA-9F52-RJQV-25QV vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, camunda, jenkins, camunda-zeebe, kafbat-ui-fips, zipkin, keycloak-config-cli, apache-activemq, apache-activemq-fips...

GHSA-659M-PX2C-25WJ vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, camunda, jenkins, camunda-zeebe, kafbat-ui-fips, zipkin, keycloak-config-cli, apache-activemq, apache-activemq-fips...

CVE-2026-41848 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, camunda, jenkins, camunda-zeebe, kafbat-ui-fips, zipkin, keycloak-config-cli, apache-activemq, apache-activemq-fips...

CVE-2026-41850 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, camunda, jenkins, camunda-zeebe, kafbat-ui-fips, zipkin, keycloak-config-cli, apache-activemq, apache-activemq-fips...

GHSA-R5W3-XV2F-J59Q vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, camunda, jenkins, camunda-zeebe, kafbat-ui-fips, zipkin, keycloak-config-cli, apache-activemq, apache-activemq-fips...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, kafbat-ui, apache-nifi-registry, camunda, jenkins, camunda-zeebe, kafbat-ui-fips, zipkin, keycloak-config-cli, apache-activemq, apache-activemq-fips...

CVE-2026-18218

A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application client using a "not-before" policy, the revocation may be silently ignored if the overall security realm already has an older,...

CVE-2026-18217

A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can...

CVE-2026-18214

Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does not check these domain restrictions. This mean...

CVE-2026-18208

A flaw was found in the OIDC token introspection endpoint of the keycloak-services component. Keycloak is an open-source identity and access management solution used to secure modern applications and services. The issue occurs when a confidential client, configured to receive signed JWT...

CVE-2026-18215

Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...

CVE-2026-18203

A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to child groups, the system incorrectly uses a simple text-based prefix check to verify group membership. This allows a user who belongs ...

CVE-2026-18211

A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...

CVE-2026-18206

A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administrator uses a wildcard domain like .example.com to restrict which hosts can register or update clients. Due to improper validation, the...

CVE-2026-18209

A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect OIDC authentication flows. The issue occurs because the security check designed to prevent HTTP parameter pollution only inspects the query portion of a redirect URL and ignores the fragment portion. Whe...