org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (23.0.3)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin...

org.apache.james:james-server-app (>=3.2.0, <=3.5.0), org.apache.james:james-server-spring (>=3.2.0, <=3.5.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.18.release)

org.springframework:spring-jms MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.james:james-server-app =3.2.0, =3.2.0, =3.5.0 Source cves: CVE-2026-41855 Sourc...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.0.3-25.0, <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.6) +7 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (25.0.6)

org.keycloak:keycloak-ldap-federation MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =4.0.3-25.0, =4.0.5-25.0 -...

org.keycloak:keycloak-dependencies-server-all (24.0.3), org.keycloak:keycloak-guides (24.0.3) +6 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (24.0.3)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.3 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (22.0.2), org.keycloak:keycloak-guides (22.0.2) +6 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (22.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 22.0.2 - org.keycloak:keycloak-guides...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-crypto-fips1402 (21.1.0) +13 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (21.1.0)

org.keycloak:keycloak-services MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-crypto-fips1402 21.1.0 -...

CVE-2026-5630 assafelovic gpt-researcher Report API app.py cross site scripting

A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file backend/server/app.py of the component Report API. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been...

net.optionfactory.keycloak:optionfactory-keycloak-provisioning-api (2.0), org.keycloak:keycloak-dependencies-server-all (20.0.0) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (20.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-provisioning-api 2.0 -...

io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-orgs (>=0.37, <=0.39) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (22.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.37, =0.39 -...

io.phasetwo.keycloak:keycloak-events (>=0.30, <=0.33), io.phasetwo.keycloak:keycloak-orgs (>=0.76, <=0.78) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (25.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.30, =0.76, =0.78 -...

Insertion of Sensitive Information Into Sent Data

Overview github.com/mattermost/mattermost-server/app is an open source Slack-alternative in Golang and React. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the WebSocket post deletion event. An attacker can access unrevealed message...

Malicious code in ui5-cap-event-app-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837e841e2b75385a4e7c030237983cfe52f91373ffa3e56859c7055ac0a80f4d The package ui5-cap-event-app-server was found to contain malicious code. Source: ossf-package-analysis...

org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin 23.0.3...

org.keycloak:keycloak-guides (17.0.0), org.keycloak:keycloak-guides-maven-plugin (17.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (17.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 17.0.0 - org.keycloak:keycloak-guides-maven-plugin 17.0.0...

org.keycloak:keycloak-quarkus-server-app (15.0.0), org.keycloak:keycloak-quarkus-server-deployment (15.0.0) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (15.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.0 -...

org.keycloak:keycloak-quarkus-server-app (13.0.1), org.keycloak:keycloak-quarkus-server-deployment (13.0.1) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (13.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.1 -...

org.keycloak:keycloak-guides (20.0.4), org.keycloak:keycloak-guides-maven-plugin (20.0.4) +2 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (20.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.4 - org.keycloak:keycloak-guides-maven-plugin 20.0.4...

org.keycloak:keycloak-guides (23.0.5), org.keycloak:keycloak-guides-maven-plugin (23.0.5) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.5 - org.keycloak:keycloak-guides-maven-plugin 23.0.5...

org.keycloak:keycloak-guides (25.0.2), org.keycloak:keycloak-guides-maven-plugin (25.0.2) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (25.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.2 - org.keycloak:keycloak-guides-maven-plugin 25.0.2...

org.keycloak:keycloak-guides (17.0.1), org.keycloak:keycloak-guides-maven-plugin (17.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (17.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 17.0.1 - org.keycloak:keycloak-guides-maven-plugin 17.0.1...