Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2026-004930)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004930 advisory. When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP...

box-oauth (>=0.2.5, <=0.3.1), chaostoolkit-openstack (>=0.1.0, <=0.1.1) +7 more potentially affected by CVE-2025-71176 via pytest (4.4.0)

pytest PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - box-oauth =0.2.5, =0.1.0, =0.1.7, =1.1.7, =0.0.1, =2019.4.3, =0.0.1, =1.0.1 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

CVE-2026-24055

Langfuse Slack OAuth installation endpoint (/api/public/slack/install) in versions

CVE-2026-24055 Langfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project Linking

Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId is preserved throughout the OAuth flow,...

CVE-2026-24055: Improper Access Control

Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId is preserved throughout the OAuth flow,...

org.jenkins-ci.plugins:keycloak (2.1.0), org.keycloak:keycloak-fuse-adapter-dist (3.4.0.final) +36 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (3.4.0.final)

org.keycloak:keycloak-adapter-core MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.jenkins-ci.plugins:keycloak 2.1.0 - org.keycloak:keycloak-fuse-adapter-dist...

com.github.bogad:itarone-keycloak-starter (>=2.0.0, <=2.1.2), org.keycloak:keycloak-as7-adapter-dist (4.0.0.final) +46 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (4.0.0.final)

org.keycloak:keycloak-adapter-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - com.github.bogad:itarone-keycloak-starter =2.0.0, =2.1.2 -...

org.keycloak:keycloak-installed-adapter (24.0.2), org.keycloak:keycloak-jakarta-servlet-filter-adapter (24.0.2) +17 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (24.0.2)

org.keycloak:keycloak-adapter-core MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-installed-adapter 24.0.2 -...

org.keycloak:keycloak-servlet-oauth-client (1.0-alpha-2), org.keycloak:keycloak-undertow-adapter (1.0-alpha-2) potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (1.0-alpha-2)

org.keycloak:keycloak-adapter-core MAVEN version 1.0-alpha-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-servlet-oauth-client 1.0-alpha-2 -...

org.keycloak:keycloak-jboss-adapter-core (1.0-alpha-3), org.keycloak:keycloak-servlet-oauth-client (1.0-alpha-3) +2 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (1.0-alpha-3)

org.keycloak:keycloak-adapter-core MAVEN version 1.0-alpha-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-jboss-adapter-core 1.0-alpha-3 -...

org.keycloak:keycloak-installed-adapter (1.4.0.final), org.keycloak:keycloak-jaxrs-oauth-client (1.4.0.final) +32 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (1.4.0.final)

org.keycloak:keycloak-adapter-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-installed-adapter 1.4.0.final -...

org.keycloak:keycloak-installed-adapter (1.9.5.final), org.keycloak:keycloak-jaxrs-oauth-client (1.9.5.final) +29 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (1.9.5.final)

org.keycloak:keycloak-adapter-core MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-installed-adapter 1.9.5.final -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.0), org.keycloak:keycloak-installed-adapter (2.1.0.final) +32 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (2.1.0.final)

org.keycloak:keycloak-adapter-core MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.0 -...

org.keycloak:keycloak-fuse-adapter-dist (3.2.0.cr1), org.keycloak:keycloak-installed-adapter (3.2.0.cr1) +35 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (3.2.0.cr1)

org.keycloak:keycloak-adapter-core MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-fuse-adapter-dist 3.2.0.cr1 -...

org.keycloak:keycloak-servlet-oauth-client (1.0-alpha-1), org.keycloak:keycloak-undertow-adapter (1.0-alpha-1) potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (1.0-alpha-1)

org.keycloak:keycloak-adapter-core MAVEN version 1.0-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-servlet-oauth-client 1.0-alpha-1 -...

org.keycloak:keycloak-installed-adapter (1.5.1.final), org.keycloak:keycloak-jaxrs-oauth-client (1.5.1.final) +30 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (1.5.1.final)

org.keycloak:keycloak-adapter-core MAVEN version 1.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-installed-adapter 1.5.1.final -...

org.keycloak:keycloak-fuse-adapter-dist (3.1.0.cr1), org.keycloak:keycloak-installed-adapter (3.1.0.cr1) +37 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (3.1.0.cr1)

org.keycloak:keycloak-adapter-core MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-fuse-adapter-dist 3.1.0.cr1 -...

com.kumuluz.ee.security:kumuluzee-security-keycloak (>=1.0.0, <=1.0.1), org.keycloak:keycloak-fuse-adapter-dist (3.2.1.final) +37 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (3.2.1.final)

org.keycloak:keycloak-adapter-core MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - com.kumuluz.ee.security:kumuluzee-security-keycloak =1.0.0, =1.0.1 -...

org.keycloak:keycloak-installed-adapter (22.0.0), org.keycloak:keycloak-jakarta-servlet-filter-adapter (22.0.0) +18 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (22.0.0)

org.keycloak:keycloak-adapter-core MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.keycloak:keycloak-installed-adapter 22.0.0 -...

org.eclipse.dirigible:dirigible-application (8.18.9), org.eclipse.dirigible:dirigible-components-security-keycloak (8.18.9) +19 more potentially affected by CVE-2026-1180 via org.keycloak:keycloak-adapter-core (23.0.2)

org.keycloak:keycloak-adapter-core MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-adapter-core and may be impacted: - org.eclipse.dirigible:dirigible-application 8.18.9 -...