org.keycloak:keycloak-dependencies-server-all (23.0.2), org.keycloak:keycloak-guides (23.0.2) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (23.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.2 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-guides (24.0.4) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (24.0.4)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 - org.keycloak:keycloak-guides...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +17 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (15.1.0)

org.keycloak:keycloak-ldap-federation MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...

org.keycloak:keycloak-dependencies-server-all (1.3.0.final), org.keycloak:keycloak-server-dist (1.3.0.final) +1 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (1.3.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.3.0.final -...

org.keycloak:keycloak-dependencies-server-all (2.5.4.final), org.keycloak:keycloak-services (2.5.4.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (2.5.4.final)

org.keycloak:keycloak-ldap-federation MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.4.final -...

org.keycloak:keycloak-dependencies-server-all (23.0.0), org.keycloak:keycloak-guides (23.0.0) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (23.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.0 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (8.0.2), org.keycloak:keycloak-server-feature-pack (8.0.2) +2 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (8.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.2 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.1) +7 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (25.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =3.0.1-25.0, =4.0.1-25.0 -...

org.keycloak:keycloak-dependencies-server-all (1.9.8.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (1.9.8.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final Source cves:...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.3), com.github.vzakharchenko:cisco-radius-plugin (1.4.3) +16 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (17.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.3 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +18 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (18.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.2), com.github.vzakharchenko:cisco-radius-plugin (1.3.2) +15 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (12.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 12.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.2 -...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +8 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (24.0.5)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 -...

io.phasetwo.keycloak:keycloak-orgs (0.47), org.keycloak:keycloak-dependencies-server-all (23.0.1) +7 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (23.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs 0.47 -...

org.keycloak:keycloak-services (4.0.0.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (4.0.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-services 4.0.0.final Source cves: CVE-2025-13467 Source...

Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization

A flaw was found in the Keycloak LDAP User Federation provider. This vulnerability allows an authenticated realm administrator to trigger deserialization of untrusted Java objects via a malicious LDAP server configuration. Mitigation Disable LDAP referrals in all LDAP user providers in all realms...

org.keycloak:keycloak-dependencies-server-all (25.0.2), org.keycloak:keycloak-guides (25.0.2) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (25.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.2 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (1.4.0.final) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (1.4.0.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.4.0.final Source cves:...

org.keycloak:keycloak-services (4.0.0.beta1) potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (4.0.0.beta1)

org.keycloak:keycloak-ldap-federation MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-services 4.0.0.beta1 Source cves: CVE-2025-13467 Source...

io.phasetwo.keycloak:keycloak-orgs (>=0.44, <=0.46), org.keycloak:keycloak-dependencies-server-all (22.0.5) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (22.0.5)

org.keycloak:keycloak-ldap-federation MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.44, =0.46 -...