org.keycloak:keycloak-account-api (1.8.0.cr2), org.keycloak:keycloak-account-freemarker (1.8.0.cr2) +82 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.8.0.cr2)

org.keycloak:keycloak-core MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.8.0.cr2 - org.keycloak:keycloak-account-freemarker 1.8.0.cr2 -...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +123 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (>=26.0.0, <=26.1.2)

org.keycloak:keycloak-core MAVEN version =26.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.0, =1.0.0, =4.1.0-26.0, =4.1.0-26.0, =2.0.0-26.0, =1.1.1-26.0, =1.1.19, =0.3.19, =1.0.9 and more Source cves: CVE-2024-4028 Source advisory: OSV:GHSA-Q4XQ-445G-G6CH...

be.jidoka:jdk-keycloak-admin (2.4.0), com.qwlabs.doraemon:quarkus-test-resource-keycloak (0.3.26) +67 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (25.0.2)

org.keycloak:keycloak-core MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - be.jidoka:jdk-keycloak-admin 2.4.0 - com.qwlabs.doraemon:quarkus-test-resource-keycloak 0.3.26 -...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), de.retest:recheck (>=1.2.0-beta.1, <=1.4.0) +83 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (6.0.1)

org.keycloak:keycloak-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =1.2.0-beta.1, =1.3.0-beta.1, =0.0.7, =0.0.7, =0.0.6,...

com.github.dasniko:testcontainers-keycloak (2.3.0), net.micedre.keycloak:keycloak-mail-whitelisting (1.5) +58 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (19.0.0)

org.keycloak:keycloak-core MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.dasniko:testcontainers-keycloak 2.3.0 - net.micedre.keycloak:keycloak-mail-whitelisting 1.5 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.3), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (1.2.6.final) +55 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.9.4.final)

org.keycloak:keycloak-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.3 -...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +97 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (10.0.1)

org.keycloak:keycloak-core MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 - com.github.vzakharchenko:mikrotik-radius-plugin 1.2.4 -...

com.blazebit:blaze-storage-client-keycloak (>=0.2.0, <=0.3.3), com.blazebit:blaze-storage-modules-authentication-keycloak (>=0.2.0, <=0.3.3) +77 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.1.0.final)

org.keycloak:keycloak-core MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.blazebit:blaze-storage-client-keycloak =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.16.1, =1.1.0.rc3,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +101 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (18.0.1)

org.keycloak:keycloak-core MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 - com.github.vzakharchenko:cisco-radius-plugin 1.4...

org.eclipse.dirigible:dirigible-server-spring (7.1.5), org.eclipse.dirigible:dirigible-spring-services (7.1.5) +51 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (20.0.4)

org.keycloak:keycloak-core MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.eclipse.dirigible:dirigible-server-spring 7.1.5 - org.eclipse.dirigible:dirigible-spring-services 7.1....

com.c4-soft.springaddons:spring-security-oauth2-test-addons (>=2.0.0, <=2.0.3), com.c4-soft.springaddons:spring-security-oauth2-test-webflux-addons (>=2.0.0, <=2.0.3) +67 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (9.0.0)

org.keycloak:keycloak-core MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-security-oauth2-test-addons =2.0.0, =2.0.0, =2.0.0, =1.1.0, =1.1.0, =1.1.0,...

com.avast.grpc.jwt:grpc-java-jwt-keycloak (>=0.5.3, <=0.5.4), com.github.vzakharchenko:chillispot-radius-plugin (1.3.19) +96 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (16.1.1)

org.keycloak:keycloak-core MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.avast.grpc.jwt:grpc-java-jwt-keycloak =0.5.3, =6.2.0, =6.2.0, =6.2.0, =6.0.0, =6.0.0, =6.4.0 and more...

com.c4-soft.springaddons:spring-addons-keycloak (>=4.0.0, <=4.2.0), com.c4-soft.springaddons:spring-addons-keycloak-jdk1.8 (>=4.1.3, <=4.1.5) +94 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (17.0.0)

org.keycloak:keycloak-core MAVEN version 17.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.c4-soft.springaddons:spring-addons-keycloak =4.0.0, =4.1.3, =4.1.0, =1.10.0, =1.4.0, =1.4.0, =1.4.0,...

ca.bc.gov.tno:dal-db (0.0.8-alpha), com.avast.grpc.jwt:grpc-java-jwt-keycloak (0.4.12) +102 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (13.0.1)

org.keycloak:keycloak-core MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - ca.bc.gov.tno:dal-db 0.0.8-alpha - com.avast.grpc.jwt:grpc-java-jwt-keycloak 0.4.12 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +70 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (9.0.2)

org.keycloak:keycloak-core MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin 1.2.2 -...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.7.beta1, <=1.2.7.final), io.apiman:apiman-distro-eap7 (>=1.2.7.beta1, <=1.2.7.final) +49 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (1.9.7.final)

org.keycloak:keycloak-core MAVEN version 1.9.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =1.2.7.beta1, =1.2.7.beta1, =1.2.7.beta1,...

com.github.dasniko:testcontainers-keycloak (3.3.0), fr.cnieg.keycloak:attribute-login-provider (1.4.4) +66 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (24.0.0)

org.keycloak:keycloak-core MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.dasniko:testcontainers-keycloak 3.3.0 - fr.cnieg.keycloak:attribute-login-provider 1.4.4 -...

io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=2.2.0.final, <=2.2.3.final), io.apiman:apiman-manager-api-security (>=2.2.0.final, <=2.2.3.final) +72 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (15.1.1)

org.keycloak:keycloak-core MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman.plugins:apiman-plugins-keycloak-oauth-policy =2.2.0.final, =2.2.0.final, =5.3.0.alpha2,...

org.keycloak:keycloak-adapter-core (2.5.0.cr1), org.keycloak:keycloak-admin-client (2.5.0.cr1) +52 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (2.5.0.cr1)

org.keycloak:keycloak-core MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.cr1 - org.keycloak:keycloak-admin-client 2.5.0.cr1 -...

com.premiumminds.flowable:flowable-keycloak (1.5), de.adorsys.keycloak:user-secret-adapter-common (1.0.7) +79 more potentially affected by CVE-2024-4028 via org.keycloak:keycloak-core (7.0.0)

org.keycloak:keycloak-core MAVEN version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.premiumminds.flowable:flowable-keycloak 1.5 - de.adorsys.keycloak:user-secret-adapter-common 1.0.7 -...