org.keycloak:keycloak-account-freemarker (1.6.0.final), org.keycloak:keycloak-broker-oidc (1.6.0.final) +9 more potentially affected by CVE-2026-4628 via org.keycloak:keycloak-services (1.6.0.final)

org.keycloak:keycloak-services MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.6.0.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-account-freemarker (1.8.1.final), org.keycloak:keycloak-broker-oidc (1.8.1.final) +9 more potentially affected by CVE-2026-4628 via org.keycloak:keycloak-services (1.8.1.final)

org.keycloak:keycloak-services MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.1.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-account-freemarker (1.5.0.final), org.keycloak:keycloak-broker-oidc (1.5.0.final) +8 more potentially affected by CVE-2026-4628 via org.keycloak:keycloak-services (1.5.0.final)

org.keycloak:keycloak-services MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.5.0.final - org.keycloak:keycloak-broker-oidc...

PT-2026-27105

Name of the Vulnerable Software and Affected Versions esaml and its forks affected versions not specified Description The software contains a flaw related to XML External Entity XXE processing. An attacker can potentially read local files and include their contents within processed SAML documents...

CVE-2026-3055: Out-of-bounds Read

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...

PT-2026-28888

Уязвимость контроллера доставки приложений NetScaler ADC ранее Citrix ADC и системы контроля доступа к виртуальной среде NetScaler Gateway ранее Citrix Gateway связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно,...

esaml 安全漏洞

esaml is a library developed by Australian developer Lexi Wilson for handling SAML authentication. It provides functions for SAML service providers and identity providers. esaml has a security vulnerability, which stems from the undisabled XML entity extensions. This vulnerability may lead to XML...

Siemens APE1808 Insufficient Session Expiration (CVE-2025-25252)

An Insufficient Session Expiration vulnerability CWE-613 in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4 all versions may allow a remote attacker e.g. a former admin whose account was removed and whose session was terminated in possessi...

GHSA-PCGW-QCV5-H8CH Unsigned SAML LogoutRequest Acceptance in gosaml2

Summary The ValidateEncodedLogoutRequestPOST function in gosaml2 accepts completely unsigned SAML LogoutRequest messages even when SkipSignatureValidation is set to false. When validateElementSignature returns dsig.ErrMissingSignature, the code in decodelogoutrequest.go:60-62 silently falls throu...

com.joelj.jenkins:ez-templates (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.574) +6 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.574)

org.jenkins-ci.main:jenkins-core MAVEN version 1.574 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.joelj.jenkins:ez-templates 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.574 -...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-saml-adapter-api-public (10.0.0) +23 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (10.0.0)

org.keycloak:keycloak-saml-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 -...

org.keycloak:keycloak-saml-adapter-galleon-pack (22.0.4), org.keycloak:keycloak-saml-jakarta-servlet-filter-adapter (22.0.4) +16 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (22.0.4)

org.keycloak:keycloak-saml-adapter-core MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-adapter-galleon-pack 22.0.4 -...

org.keycloak:keycloak-saml-jetty-adapter-core (15.1.0), org.keycloak:keycloak-saml-jetty92-adapter (15.1.0) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (15.1.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 15.1.0 -...

org.keycloak:keycloak-dependencies-server-all (1.9.7.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.7.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.9.7.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.7.final -...

org.keycloak:keycloak-account-freemarker (1.8.0.alpha1), org.keycloak:keycloak-broker-oidc (1.8.0.alpha1) +9 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (1.8.0.alpha1)

org.keycloak:keycloak-services MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.alpha1 - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-dependencies-server-all (2.2.1.final), org.keycloak:keycloak-saml-adapter-api-public (2.2.1.final) +21 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (2.2.1.final)

org.keycloak:keycloak-saml-core MAVEN version 2.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.2.1.final -...

org.keycloak:keycloak-saml-adapter-api-public (4.8.1.final), org.keycloak:keycloak-saml-adapter-core (4.8.1.final) +25 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (4.8.1.final)

org.keycloak:keycloak-saml-core MAVEN version 4.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.8.1.final -...

org.keycloak:keycloak-saml-as7-adapter-dist (6.0.0), org.keycloak:keycloak-saml-as7-modules (6.0.0) +21 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (6.0.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 6.0.0 -...

org.keycloak:keycloak-saml-jetty-adapter-core (1.8.0.cr2), org.keycloak:keycloak-saml-jetty81-adapter (1.8.0.cr2) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (1.8.0.cr2)

org.keycloak:keycloak-saml-adapter-core MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 1.8.0.cr2 -...

org.keycloak:keycloak-saml-jetty-adapter-core (20.0.0), org.keycloak:keycloak-saml-jetty94-adapter (20.0.0) +10 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (20.0.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 20.0.0 -...