de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11) +9 more potentially affected by CVE-2026-9793 via org.keycloak:keycloak-services (6.0.1)

org.keycloak:keycloak-services MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =0.0.6, =0.0.6, =1.0.11 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.11), io.phasetwo.keycloak:keycloak-events (>=0.30, <=0.33) +29 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (25.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.11 -...

com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +22 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (10.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 -...

io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-magic-link (>=0.16, <=0.19) +56 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (22.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.16, =0.37, =0.9, =1.6, =2.1 -...

org.keycloak:keycloak-authz-policy-common (3.4.0.final), org.keycloak:keycloak-authz-policy-drools (3.4.0.final) +13 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (3.4.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.0.final -...

org.keycloak:keycloak-authz-policy-common (2.5.5.final), org.keycloak:keycloak-authz-policy-drools (2.5.5.final) +12 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (2.5.5.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.5.5.final -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +38 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (18.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 -...

com.abavilla:fpi-bot-api (>=1.6.0, <=1.8.0), com.abavilla:fpi-bot-api-parent (>=1.6.0, <=1.8.0) +88 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (21.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-bot-api =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8....

com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.0, <=1.4.2), com.github.vzakharchenko:cisco-radius-plugin (>=1.4.0, <=1.4.2) +34 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (17.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.4.0, =1.4.0, =1.4.0,...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +142 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.4.7)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =2.0.0 and more Source cves: CVE-2026-9791 Source advisory: OSV:GHSA-4Q93-V92X-P89F...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-authz-policy-common (4.5.0.final) +10 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.5.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.5.3-23.0, <=2.5.5-23.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.3-23.0, <=2.5.5-23.0) +66 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (23.0.7)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.5.3-23.0, =2.5.3-23.0,...

org.keycloak:keycloak-authz-policy-common (4.7.0.final), org.keycloak:keycloak-dependencies-server-min (4.7.0.final) +9 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.7.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.7.0.final -...

io.github.kilmajster:keycloak-username-password-attribute-authenticator (0.2.0), org.keycloak:authenticator-required-action-example (15.1.1) +25 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (15.1.1)

org.keycloak:keycloak-server-spi-private MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.kilmajster:keycloak-username-password-attribute-authenticator 0.2.0 ...

com.markstickel.keycloak:keycloak-kafka-publisher-event-listener-provider (1.0.0), io.github.pckhoi.keycloak:webhook (19.0.2.1) +30 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (19.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.markstickel.keycloak:keycloak-kafka-publisher-event-listener-provider 1.0....

com.github.vzakharchenko:chillispot-radius-plugin (1.3.11), com.github.vzakharchenko:cisco-radius-plugin (1.3.11) +33 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (15.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 15.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.11 -...

org.keycloak:keycloak-authz-policy-common (4.6.0.final), org.keycloak:keycloak-dependencies-server-min (4.6.0.final) +9 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.6.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.6.0.final -...

com.charlyghislain.keycloak:keycloak-importexport (12.0.0), com.github.vzakharchenko:chillispot-radius-plugin (1.3.5) +34 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (12.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 12.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 12.0.0 -...

org.keycloak:keycloak-authz-policy-common (4.8.0.final), org.keycloak:keycloak-dependencies-server-min (4.8.0.final) +9 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.8.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.8.0.final -...

org.keycloak:keycloak-authz-policy-common (8.0.0), org.keycloak:keycloak-authz-policy-drools (8.0.0) +14 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (8.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 8.0.0 -...