org.keycloak:keycloak-broker-saml (1.5.0.final), org.keycloak:keycloak-dependencies-server-all (1.5.0.final) +1 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.5.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.5.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-dependencies-server-all (24.0.4), org.keycloak:keycloak-guides (24.0.4) +24 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (24.0.4)

org.keycloak:keycloak-saml-core MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.4 - org.keycloak:keycloak-guides 24.0.4 -...

org.keycloak:keycloak-dependencies-server-all (3.1.0.final), org.keycloak:keycloak-saml-adapter-api-public (3.1.0.final) +24 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (3.1.0.final)

org.keycloak:keycloak-saml-core MAVEN version 3.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.1.0.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (24.0.1), org.keycloak:keycloak-saml-jetty94-adapter (24.0.1) +9 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (24.0.1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 24.0.1 -...

org.keycloak:keycloak-dependencies-server-all (2.2.0.final), org.keycloak:keycloak-saml-adapter-api-public (2.2.0.final) +21 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (2.2.0.final)

org.keycloak:keycloak-saml-core MAVEN version 2.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.2.0.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (2.3.0.final), org.keycloak:keycloak-saml-jetty81-adapter (2.3.0.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (2.3.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 2.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 2.3.0.final -...

org.keycloak:keycloak-broker-saml (1.8.1.final), org.keycloak:keycloak-dependencies-server-all (1.8.1.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.8.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.1.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-saml-adapter-galleon-pack (21.1.2), org.keycloak:keycloak-saml-jakarta-servlet-filter-adapter (21.1.2) +16 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (21.1.2)

org.keycloak:keycloak-saml-adapter-core MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-adapter-galleon-pack 21.1.2 -...

org.keycloak:keycloak-saml-as7-adapter-dist (10.0.0), org.keycloak:keycloak-saml-as7-modules (10.0.0) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (10.0.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 10.0.0 -...

GHSA-XV6H-R36F-3GP5 Keycloak: Denial of Service due to excessive SAMLRequest decompression

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...

org.keycloak:keycloak-account-freemarker (1.2.0.cr1), org.keycloak:keycloak-broker-oidc (1.2.0.cr1) +8 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-services (1.2.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.2.0.cr1 - org.keycloak:keycloak-broker-oidc 1.2.0.cr...

org.keycloak:keycloak-saml-as7-adapter-dist (4.2.1.final), org.keycloak:keycloak-saml-as7-modules (4.2.1.final) +24 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (4.2.1.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 4.2.1.final -...

org.keycloak:keycloak-saml-jetty-adapter-core (2.2.1.final), org.keycloak:keycloak-saml-jetty81-adapter (2.2.1.final) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (2.2.1.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 2.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 2.2.1.final -...

org.keycloak:keycloak-dependencies-server-all (9.0.3), org.keycloak:keycloak-saml-adapter-api-public (9.0.3) +23 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (9.0.3)

org.keycloak:keycloak-saml-core MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.3 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-saml-jetty-adapter-core (18.0.0), org.keycloak:keycloak-saml-jetty92-adapter (18.0.0) +16 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (18.0.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 18.0.0 -...

org.keycloak:keycloak-dependencies-server-all (25.0.0), org.keycloak:keycloak-guides (25.0.0) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (25.0.0)

org.keycloak:keycloak-saml-core MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.0 - org.keycloak:keycloak-guides 25.0.0 -...

org.keycloak:keycloak-dependencies-server-all (2.1.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (2.1.0.cr1) +21 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (2.1.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.1.0.cr1 -...

org.javaloong.kongmink.keycloak:keycloak-embedded-server (1.1.0), org.keycloak:keycloak-dependencies-server-all (19.0.3) +22 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (19.0.3)

org.keycloak:keycloak-saml-core MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.javaloong.kongmink.keycloak:keycloak-embedded-server 1.1.0 -...

org.keycloak:keycloak-api-docs-dist (16.1.0), org.keycloak:keycloak-dependencies-server-all (16.1.0) +27 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (16.1.0)

org.keycloak:keycloak-saml-core MAVEN version 16.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 16.1.0 - org.keycloak:keycloak-dependencies-server-all 16.1....

org.keycloak:keycloak-saml-jetty-adapter-core (1.8.1.final), org.keycloak:keycloak-saml-jetty81-adapter (1.8.1.final) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (1.8.1.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 1.8.1.final -...