CVE-2025-20381 SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool

In Splunk MCP Server app versions below 0.2.4, a user with access to the "runsplunkquery" Model Context Protocol MCP tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions...

PT-2025-48953

In Splunk MCP Server app versions below 0.2.4, a user with access to the "run splunk query" Model Context Protocol MCP tool could bypass the SPL command allowlist controls in MCP by embedding SPL commands as sub-searches, leading to unauthorized actions beyond the intended MCP restrictions...

org.keycloak:keycloak-guides (23.0.1), org.keycloak:keycloak-guides-maven-plugin (23.0.1) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.1 - org.keycloak:keycloak-guides-maven-plugin 23.0.1...

org.keycloak:keycloak-quarkus-server-app (14.0.0), org.keycloak:keycloak-quarkus-server-deployment (14.0.0) potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (14.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 14.0.0 -...

org.keycloak:keycloak-guides (22.0.0), org.keycloak:keycloak-guides-maven-plugin (22.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (22.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.0 - org.keycloak:keycloak-guides-maven-plugin 22.0.0...

org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin 23.0.3...

org.keycloak:keycloak-guides (19.0.0), org.keycloak:keycloak-guides-maven-plugin (19.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (19.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.0 - org.keycloak:keycloak-guides-maven-plugin 19.0.0...

org.keycloak:keycloak-guides (24.0.3), org.keycloak:keycloak-guides-maven-plugin (24.0.3) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (24.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.3 - org.keycloak:keycloak-guides-maven-plugin 24.0.3...

org.keycloak:keycloak-guides (25.0.3), org.keycloak:keycloak-guides-maven-plugin (25.0.3) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (25.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.3 - org.keycloak:keycloak-guides-maven-plugin 25.0.3...

org.keycloak:keycloak-guides (19.0.3), org.keycloak:keycloak-guides-maven-plugin (19.0.3) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (19.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.3 - org.keycloak:keycloak-guides-maven-plugin 19.0.3...

org.keycloak:keycloak-guides (20.0.1), org.keycloak:keycloak-guides-maven-plugin (20.0.1) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (20.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.1 - org.keycloak:keycloak-guides-maven-plugin 20.0.1...

org.keycloak:keycloak-guides (20.0.4), org.keycloak:keycloak-guides-maven-plugin (20.0.4) +2 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (20.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.4 - org.keycloak:keycloak-guides-maven-plugin 20.0.4...

org.keycloak:keycloak-guides (21.0.0), org.keycloak:keycloak-guides-maven-plugin (21.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (21.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 21.0.0 - org.keycloak:keycloak-guides-maven-plugin 21.0.0...

org.keycloak:keycloak-guides (25.0.2), org.keycloak:keycloak-guides-maven-plugin (25.0.2) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (25.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.2 - org.keycloak:keycloak-guides-maven-plugin 25.0.2...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0), org.keycloak:keycloak-guides (25.0.4) +4 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (25.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 4.0.2-25.0 -...

org.keycloak:keycloak-guides (23.0.0), org.keycloak:keycloak-guides-maven-plugin (23.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.0 - org.keycloak:keycloak-guides-maven-plugin 23.0.0...

org.keycloak:keycloak-guides (23.0.4), org.keycloak:keycloak-guides-maven-plugin (23.0.4) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.4 - org.keycloak:keycloak-guides-maven-plugin 23.0.4...

org.keycloak:keycloak-guides (23.0.5), org.keycloak:keycloak-guides-maven-plugin (23.0.5) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.5 - org.keycloak:keycloak-guides-maven-plugin 23.0.5...

org.keycloak:keycloak-guides (18.0.2), org.keycloak:keycloak-guides-maven-plugin (18.0.2) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (18.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 18.0.2 - org.keycloak:keycloak-guides-maven-plugin 18.0.2...

org.keycloak:keycloak-guides (20.0.0), org.keycloak:keycloak-guides-maven-plugin (20.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (20.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.0 - org.keycloak:keycloak-guides-maven-plugin 20.0.0...