de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.7.3), net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=9.5) +28 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (>=26.0.0, <=26.6.4)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version =26.0.0, =4.1.0-26.0, =8.1, =26.3.0, =26.1.0, =26.4.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.4.0, =26.1.0, =26.6.0, =26.2.0, =26.2.0...

org.keycloak:keycloak-guides (23.0.2), org.keycloak:keycloak-guides-maven-plugin (23.0.2) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (23.0.2)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 23.0.2 - org.keycloak:keycloak-guides-maven-plugin...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0), org.keycloak:keycloak-guides (25.0.1) +5 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (25.0.1)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =3.0.1-25.0, =4.0.1-25.0 -...

org.keycloak:keycloak-guides (25.0.2), org.keycloak:keycloak-guides-maven-plugin (25.0.2) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (25.0.2)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 25.0.2 - org.keycloak:keycloak-guides-maven-plugin...

org.keycloak:keycloak-guides (22.0.4), org.keycloak:keycloak-guides-maven-plugin (22.0.4) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (22.0.4)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 22.0.4 - org.keycloak:keycloak-guides-maven-plugin...

org.keycloak:keycloak-guides (23.0.7), org.keycloak:keycloak-guides-maven-plugin (23.0.7) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (23.0.7)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 23.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 23.0.7 - org.keycloak:keycloak-guides-maven-plugin...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +6 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (24.0.5)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 -...

io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=0.2.0), org.keycloak:keycloak-guides (21.0.1) +5 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (21.0.1)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics =0.1.0, =0.2.0 -...

io.kokuwa.keycloak:keycloak-event-metrics (1.0.0), org.keycloak:keycloak-guides (21.1.1) +5 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (21.1.1)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 1.0.0 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-guides (21.0.0), org.keycloak:keycloak-guides-maven-plugin (21.0.0) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (21.0.0)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 21.0.0 - org.keycloak:keycloak-guides-maven-plugin...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +32 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (>=21.0.0, <=26.6.4)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version =21.0.0, =2.5.6-24.0, =0.1.0, =8.1, =26.3.0, =26.1.0, =26.4.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.4.0, =26.1.0, =26.6.4 and more Source cves:...

free (>=0.0.1, <=0.0.2), hdltex (1.0.4) +2 more potentially affected by CVE-2026-11816 via keras (2.0.9)

keras PYPI version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - free =0.0.1, =1.0.0, =1.0.1, =1.0.2 Source cves: CVE-2026-11816 Source advisory: OSV:GHSA-HQP4-2352-XF5R...

CVE-2026-41730

Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer internals to HTTP clients. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0 through 4.5.11; 5.0.0 through...

CVE-2026-41728

Spring Data REST's JSON Patch application/json-patch+json implementation does not apply the write-access filter to intermediate path segments when resolving a multi-segment JSON Pointer. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0...

CVE-2026-53673

BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST API that allows authenticated attackers to access arbitrary private message threads by supplying a userid parameter in the request. Attackers can pass another user's identifier to the...

PT-2026-80738

Name of the Vulnerable Software and Affected Versions XWiki versions prior to 16.10.17 XWiki versions prior to 17.4.10 XWiki versions prior to 17.10.4 XWiki versions prior to 18.1.0 Description Users with page editing permissions can utilize the Live Data edit REST API to modify page rights,...

WordPress plugin Fediverse Embeds 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

CVE-2026-46622: Cleartext Storage of Sensitive Information

SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API requests are stored as plaintext strings in the apitokens database table. Any attacker who obtains read access to the database — through SQL injection, a leaked backup, a...

mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine

A flaw was found in MariaDB server. When the CONNECT engine is installed and REST support is enabled on Windows, a user can exploit improper sanitization of the table HTTP attribute. This attribute is interpolated into the curl command line, allowing for arbitrary shell command execution on the...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the CreateInstanceFromBackup process when handling a crafted backup tarball that omits the volume field in the configuration. An attacker can cause the daemon to crash and terminate all running operations by...