org.keycloak:keycloak-dependencies-server-all (1.9.8.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.8.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.9.8.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (15.1.1), org.keycloak:keycloak-saml-jetty92-adapter (15.1.1) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (15.1.1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 15.1.1 -...

org.keycloak:keycloak-saml-jetty-adapter-core (24.0.2), org.keycloak:keycloak-saml-jetty94-adapter (24.0.2) +9 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (24.0.2)

org.keycloak:keycloak-saml-adapter-core MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 24.0.2 -...

org.keycloak:keycloak-dependencies-server-all (3.2.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (3.2.0.cr1) +26 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (3.2.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.0.cr1 -...

org.keycloak:keycloak-saml-as7-adapter-dist (9.0.0), org.keycloak:keycloak-saml-as7-modules (9.0.0) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (9.0.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 9.0.0 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.5.1), de.arbeitsagentur.opdt:keycloak-extension-bundid (>=2.0.0-26.0, <=2.6.0) +35 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (>=26.0.0, <=26.5.3)

org.keycloak:keycloak-saml-core MAVEN version =26.0.0, =4.1.0-26.0, =2.0.0-26.0, =8.1, =26.3.0, =26.1.0, =26.4.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.4.0, =26.1.0, =26.2.0, =26.2.0, =26.5.3 and more Source cves...

org.keycloak:keycloak-saml-jetty-adapter-core (2.4.0.final), org.keycloak:keycloak-saml-jetty81-adapter (2.4.0.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (2.4.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 2.4.0.final -...

org.keycloak:keycloak-broker-saml (1.5.0.final), org.keycloak:keycloak-dependencies-server-all (1.5.0.final) +1 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.5.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.5.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-saml-as7-adapter-dist (12.0.0), org.keycloak:keycloak-saml-as7-modules (12.0.0) +20 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (12.0.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 12.0.0 -...

org.keycloak:keycloak-broker-saml (1.4.0.final), org.keycloak:keycloak-dependencies-server-all (1.4.0.final) +1 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.4.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (20.0.5), org.keycloak:keycloak-guides (20.0.5) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (20.0.5)

org.keycloak:keycloak-saml-core MAVEN version 20.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 20.0.5 - org.keycloak:keycloak-guides 20.0.5 -...

org.keycloak:keycloak-dependencies-server-all (1.9.2.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.2.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.9.2.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.2.final -...

io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=0.2.0), net.optionfactory.keycloak:optionfactory-keycloak-cie (>=2.2, <=2.4) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (21.0.1)

org.keycloak:keycloak-saml-core MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics =0.1.0, =2.2, =2.2, =2.4 -...

org.keycloak:keycloak-saml-undertow-adapter (25.0.4), org.keycloak:keycloak-saml-wildfly-adapter-dist (25.0.4) +3 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (25.0.4)

org.keycloak:keycloak-saml-adapter-core MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-undertow-adapter 25.0.4 -...

org.keycloak:keycloak-saml-as7-adapter-dist (8.0.2), org.keycloak:keycloak-saml-as7-modules (8.0.2) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (8.0.2)

org.keycloak:keycloak-saml-adapter-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 8.0.2 -...

Keycloak: Denial of Service due to excessive SAMLRequest decompression

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...

org.keycloak:keycloak-account-freemarker (1.6.0.final), org.keycloak:keycloak-broker-oidc (1.6.0.final) +9 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (1.6.0.final)

org.keycloak:keycloak-services MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.6.0.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-saml-jetty-adapter-core (3.2.1.final), org.keycloak:keycloak-saml-jetty81-adapter (3.2.1.final) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (3.2.1.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 3.2.1.final -...

org.keycloak:keycloak-saml-adapter-galleon-pack (21.1.0), org.keycloak:keycloak-saml-jakarta-servlet-filter-adapter (21.1.0) +16 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (21.1.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-adapter-galleon-pack 21.1.0 -...

org.keycloak:keycloak-dependencies-server-all (10.0.1), org.keycloak:keycloak-saml-adapter-api-public (10.0.1) +23 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (10.0.1)

org.keycloak:keycloak-saml-core MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.1 -...