org.keycloak:keycloak-dependencies-server-all (1.0.4.final), org.keycloak:keycloak-server (1.0.4.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (1.0.4.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0.4.final -...

io.phasetwo.keycloak:keycloak-orgs (>=0.67, <=0.75), org.keycloak:keycloak-dependencies-server-all (24.0.0) +7 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (24.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.67, =0.75 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.0, <=1.4.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.4.0, <=1.4.2) +16 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (17.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.4.0, =1.4.0, =1.4.0, =1.4.0,...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=5.4.4-26.4, <=5.4.6), io.phasetwo.keycloak:keycloak-orgs (>=0.107, <=0.124) +27 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (>=26.3.0, <=26.4.5)

org.keycloak:keycloak-ldap-federation MAVEN version =26.3.0, =5.4.4-26.4, =0.107, =8.0, =8.1, =26.3.0, =26.3.0, =26.4.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.4.0, =26.3.0, =26.3.0, =26.4.5 and more Source cves: CVE-2025-1...

org.keycloak:keycloak-dependencies-server-all (23.0.2), org.keycloak:keycloak-guides (23.0.2) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (23.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.2 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2), org.keycloak:keycloak-server-feature-pack (3.3.0.cr2) +2 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (3.3.0.cr2)

org.keycloak:keycloak-ldap-federation MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.3.0.cr2 -...

org.keycloak:keycloak-services (4.0.0.beta2) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (4.0.0.beta2)

org.keycloak:keycloak-ldap-federation MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-services 4.0.0.beta2 Source cves: CVE-2025-13467 Source...

org.keycloak:keycloak-dependencies-server-all (1.2.0.cr1) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (1.2.0.cr1)

org.keycloak:keycloak-ldap-federation MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.2.0.cr1 Source cves: CVE-2025-134...

org.keycloak:keycloak-services (4.0.0.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (4.0.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-services 4.0.0.final Source cves: CVE-2025-13467 Source...

org.keycloak:keycloak-dependencies-server-all (8.0.0), org.keycloak:keycloak-server-feature-pack (8.0.0) +2 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (8.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.0 -...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-guides (24.0.4) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (24.0.4)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (23.0.0), org.keycloak:keycloak-guides (23.0.0) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (23.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.0 - org.keycloak:keycloak-guides...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.3), com.github.vzakharchenko:cisco-radius-plugin (1.3.3) +15 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (12.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 12.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.3 -...

org.keycloak:keycloak-dependencies-server-all (1.6.1.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (1.6.1.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.6.1.final Source cves:...

org.keycloak:keycloak-dependencies-server-all (1.4.0.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (1.4.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.4.0.final Source cves:...

org.keycloak:keycloak-dependencies-server-all (22.0.2), org.keycloak:keycloak-guides (22.0.2) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (22.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 22.0.2 - org.keycloak:keycloak-guides...

dev.jcputney:keycloak-theme-additional-info-extension (>=1.1.4, <=1.1.5), org.keycloak:keycloak-crypto-fips1402 (23.0.2) +13 more potentially affected by CVE-2025-14082 via org.keycloak:keycloak-services (23.0.2)

org.keycloak:keycloak-services MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - dev.jcputney:keycloak-theme-additional-info-extension =1.1.4, =1.1.5 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.4.6), io.phasetwo.keycloak:keycloak-orgs (>=0.79, <=0.124) +29 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (>=26.0.0, <=26.4.5)

org.keycloak:keycloak-ldap-federation MAVEN version =26.0.0, =4.1.0-26.0, =0.79, =6.19, =8.1, =26.3.0, =26.1.0, =26.4.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.4.0, =26.1.0, =26.2.0, =26.4.5 and more Source cves: CVE-2025-1...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the URL references when following referrals. An attacker can manipulate application behavior by configuring a malicious LDAP server and triggering deserialization of untrusted Java objects as an...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=5.4.4-26.4, <=5.4.6), io.phasetwo.keycloak:keycloak-orgs (>=0.107, <=0.124) +27 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (>=26.3.0, <=26.4.5)

org.keycloak:keycloak-ldap-federation MAVEN version =26.3.0, =5.4.4-26.4, =0.107, =8.0, =8.1, =26.3.0, =26.3.0, =26.4.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.4.0, =26.3.0, =26.3.0, =26.4.5 and more Source cves: CVE-2025-1...