io.github.johnjcool:keycloak-cas-services (4.4.0.final), org.keycloak:keycloak-dependencies-server-min (4.4.0.final) +3 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (4.4.0.final)

org.keycloak:keycloak-services MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...

org.keycloak:keycloak-account-freemarker (1.0-alpha-2), org.keycloak:keycloak-login-freemarker (1.0-alpha-2) +1 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.0-alpha-2)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-2 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-account-freemarker (1.0-alpha-3), org.keycloak:keycloak-login-freemarker (1.0-alpha-3) +1 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.0-alpha-3)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-3 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-account-freemarker (1.0-alpha-4), org.keycloak:keycloak-login-freemarker (1.0-alpha-4) +1 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.0-alpha-4)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-4 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150523), org.keycloak:keycloak-login-freemarker (1.0-beta-1-20150523) +1 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.0-beta-1-20150523)

org.keycloak:keycloak-services MAVEN version 1.0-beta-1-20150523 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-beta-1-20150523 -...

org.keycloak:keycloak-authz-policy-drools (2.5.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.5.0.cr1) +5 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (2.5.0.cr1)

org.keycloak:keycloak-services MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.5.0.cr1 -...

org.keycloak:keycloak-authz-policy-drools (2.2.0.final), org.keycloak:keycloak-dependencies-server-all (2.2.0.final) +4 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (2.2.0.final)

org.keycloak:keycloak-services MAVEN version 2.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.2.0.final -...

org.keycloak:keycloak-authz-policy-drools (2.3.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.3.0.cr1) +5 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (2.3.0.cr1)

org.keycloak:keycloak-services MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.3.0.cr1 -...

org.keycloak:keycloak-authz-policy-drools (3.0.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.0.0.cr1) +4 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (3.0.0.cr1)

org.keycloak:keycloak-services MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.0.0.cr1 -...

org.keycloak:keycloak-authz-policy-drools (3.1.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.1.0.cr1) +4 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (3.1.0.cr1)

org.keycloak:keycloak-services MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.1.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (1.9.0.final), org.keycloak:keycloak-dependencies-server-min (1.9.0.final) +2 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.9.0.final)

org.keycloak:keycloak-services MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.0.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.1.final), org.keycloak:keycloak-dependencies-server-min (1.9.1.final) +2 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.9.1.final)

org.keycloak:keycloak-services MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.1.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.7.final), org.keycloak:keycloak-dependencies-server-min (1.9.7.final) +2 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.9.7.final)

org.keycloak:keycloak-services MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.7.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.8.final), org.keycloak:keycloak-dependencies-server-min (1.9.8.final) +2 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (1.9.8.final)

org.keycloak:keycloak-services MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final -...

org.keycloak:keycloak-dependencies-server-min (4.0.0.beta1), org.keycloak:keycloak-model-jpa (4.0.0.beta1) +2 more potentially affected by CVE-2026-3429 via org.keycloak:keycloak-services (4.0.0.beta1)

org.keycloak:keycloak-services MAVEN version 4.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.0.0.beta1 - org.keycloak:keycloak-model-jpa...

DRUPAL-CONTRIB-2026-028

The module and certain submodules AI Automators, AI Translate, AI API Explorer, AI Content Suggestions provide the ability to use an LLM to generate HTML or Markdown and preview it in a browser. Under certain circumstances, rendering of this HTML can lead to exposing secret communications in the...

Important: Red Hat Security Advisory: RHTAS 1.3.2 - Tech Preview Release Of the Model Validation Operator

The Tech Preview release of the RHTAS Model Validation Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Model Validation Operator can be used with OpenShift Container Platform 4.16, 4.17,...

Important: Red Hat Security Advisory: RHTAS 1.3.2 - Tech Preview Release of Model Transparency

The Tech Preview release of the RHTAS Model Transparency CLI image. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.3 The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads...

CVE-2026-0489

Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthenticated attacker to inject specially crafted input which upon user interaction could result in a DOM-based Cross-Site Scripting XSS vulnerability. This issue ha...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-dependencies-server-min (4.5.0.final) +3 more potentially affected by CVE-2026-3911 via org.keycloak:keycloak-services (4.5.0.final)

org.keycloak:keycloak-services MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...