org.keycloak:keycloak-saml-jetty-adapter-core (15.1.0), org.keycloak:keycloak-saml-jetty92-adapter (15.1.0) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (15.1.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 15.1.0 -...

org.keycloak:keycloak-saml-as7-adapter-dist (8.0.1), org.keycloak:keycloak-saml-as7-modules (8.0.1) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (8.0.1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 8.0.1 -...

org.keycloak:keycloak-saml-jetty-adapter-core (1.6.0.final), org.keycloak:keycloak-saml-jetty81-adapter (1.6.0.final) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (1.6.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 1.6.0.final -...

org.keycloak:keycloak-saml-as7-adapter-dist (10.0.1), org.keycloak:keycloak-saml-as7-modules (10.0.1) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (10.0.1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 10.0.1 -...

org.keycloak:keycloak-saml-jetty-adapter-core (3.2.1.final), org.keycloak:keycloak-saml-jetty81-adapter (3.2.1.final) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (3.2.1.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 3.2.1.final -...

org.keycloak:keycloak-saml-as7-adapter-dist (8.0.2), org.keycloak:keycloak-saml-as7-modules (8.0.2) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (8.0.2)

org.keycloak:keycloak-saml-adapter-core MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 8.0.2 -...

Keycloak: Denial of Service due to excessive SAMLRequest decompression

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...

org.keycloak:keycloak-saml-as7-adapter-dist (11.0.3), org.keycloak:keycloak-saml-as7-modules (11.0.3) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (11.0.3)

org.keycloak:keycloak-saml-adapter-core MAVEN version 11.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 11.0.3 -...

io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=0.2.0), net.optionfactory.keycloak:optionfactory-keycloak-cie (>=2.2, <=2.4) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (21.0.1)

org.keycloak:keycloak-saml-core MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics =0.1.0, =2.2, =2.2, =2.4 -...

org.keycloak:keycloak-saml-undertow-adapter (25.0.4), org.keycloak:keycloak-saml-wildfly-adapter-dist (25.0.4) +3 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (25.0.4)

org.keycloak:keycloak-saml-adapter-core MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-undertow-adapter 25.0.4 -...

org.keycloak:keycloak-saml-as7-adapter-dist (3.4.2.final), org.keycloak:keycloak-saml-as7-modules (3.4.2.final) +24 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (3.4.2.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 3.4.2.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (1.9.1.final), org.keycloak:keycloak-saml-jetty81-adapter (1.9.1.final) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (1.9.1.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 1.9.1.final -...

org.keycloak:keycloak-broker-saml (1.4.0.final), org.keycloak:keycloak-dependencies-server-all (1.4.0.final) +1 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.4.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.4.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-saml-jetty-adapter-core (3.1.0.cr1), org.keycloak:keycloak-saml-jetty81-adapter (3.1.0.cr1) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (3.1.0.cr1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 3.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 3.1.0.cr1 -...

org.keycloak:keycloak-saml-adapter-galleon-pack (21.1.2), org.keycloak:keycloak-saml-jakarta-servlet-filter-adapter (21.1.2) +16 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (21.1.2)

org.keycloak:keycloak-saml-adapter-core MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-adapter-galleon-pack 21.1.2 -...

org.keycloak:keycloak-saml-as7-adapter-dist (10.0.0), org.keycloak:keycloak-saml-as7-modules (10.0.0) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (10.0.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 10.0.0 -...

org.javaloong.kongmink.keycloak:keycloak-embedded-server (1.1.0), org.keycloak:keycloak-dependencies-server-all (19.0.3) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (19.0.3)

org.keycloak:keycloak-saml-core MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.javaloong.kongmink.keycloak:keycloak-embedded-server 1.1.0 -...

org.keycloak:keycloak-saml-adapter-api-public (4.3.0.final), org.keycloak:keycloak-saml-adapter-core (4.3.0.final) +25 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (4.3.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.3.0.final -...

org.keycloak:keycloak-api-docs-dist (16.1.0), org.keycloak:keycloak-dependencies-server-all (16.1.0) +27 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (16.1.0)

org.keycloak:keycloak-saml-core MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 16.1.0 - org.keycloak:keycloak-dependencies-server-all 16.1....

org.keycloak:keycloak-broker-saml (1.8.1.final), org.keycloak:keycloak-dependencies-server-all (1.8.1.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.8.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.1.final - org.keycloak:keycloak-dependencies-server-a...