org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.beta2), org.keycloak:keycloak-account-freemarker (1.0-beta-4) +3 more potentially affected by CVE-2026-3872 via org.keycloak:keycloak-services (1.0-beta-4)

org.keycloak:keycloak-services MAVEN version 1.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.beta2 -...

org.keycloak:keycloak-authz-policy-drools (3.3.0.cr2), org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2) +6 more potentially affected by CVE-2026-3872 via org.keycloak:keycloak-services (3.3.0.cr2)

org.keycloak:keycloak-services MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.cr2 -...

@adaptic/backend-legacy (0.0.941), @adaptic/lumic-utils (>=1.0.8, <=1.0.50) +308 more potentially affected by CVE-2026-34451 via @anthropic-ai/sdk (>=0.79.0, <=0.80.0)

@anthropic-ai/sdk NPM version =0.79.0, =1.0.8, =0.0.99, =1.0.0, =1.2.2, =0.4.2, =0.25.0, =1.0.0, =1.3.0, =0.0.0, =0.0.0, =0.1.0, =0.2.91, =2026.5.19-1, =0.2.0-alpha.1, =0.2.0-alpha.7 and more Source cves: CVE-2026-34451 Source advisory: OSV:GHSA-5474-4W2J-MQ4C...

GHSA-5QVP-PR9F-2G2V poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645

Pin vulnerable version of requests library...

Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - IoT Component uses assertj-core-3.27.6.jar, minimatch-3.1.2.tgz, flask-3.1.2-py3-none-any.whl and werkzeug-3.1.5-py3-none-any.whl third party dependencies which is vulnerable to CVE-2026-24400, CVE-2026-26996, CVE-2026-27205 and CVE-2026-27199. This bulletin...

4coders-commons (>=0.0.1, <=0.0.2), @11ty/eleventy (0.3.3) +3655 more potentially affected by CVE-2026-33938 via handlebars (>=4.0.0, <=4.7.8)

handlebars NPM version =4.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.11, =0.0.52, =0.1.0, =0.0.72, =0.1.0, =1.1.1-pr-7-1d68cf28da, =0.0.0-13d458778df8db161111e788ed4207a13a110724, =1.16.0, =1.16.0, =1.16.0, =2.4.4 and more Source cves: CVE-2026-33938 Source advisory: SNYK:JS-HANDLEBARS-15803082...

CVE-2025-15612 Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE

Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercept and modify downloaded dependencies o...

org.keycloak:keycloak-account-freemarker (1.0.1.final), org.keycloak:keycloak-dependencies-server-all (1.0.1.final) +3 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (1.0.1.final)

org.keycloak:keycloak-services MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.1.final -...

org.keycloak:keycloak-authz-policy-drools (2.2.1.final), org.keycloak:keycloak-dependencies-server-all (2.2.1.final) +4 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (2.2.1.final)

org.keycloak:keycloak-services MAVEN version 2.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.2.1.final -...

org.keycloak:keycloak-account-freemarker (1.5.1.final), org.keycloak:keycloak-broker-oidc (1.5.1.final) +8 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (1.5.1.final)

org.keycloak:keycloak-services MAVEN version 1.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.5.1.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-account-freemarker (1.1.0.beta1), org.keycloak:keycloak-dependencies-server-min (1.1.0.beta1) +1 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (1.1.0.beta1)

org.keycloak:keycloak-services MAVEN version 1.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.1.0.beta1 -...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-server-feature-pack (11.0.2) +2 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (11.0.2)

org.keycloak:keycloak-model-jpa MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 - org.keycloak:keycloak-server-feature-pack...

org.eclipse.dirigible:dirigible-server-spring (7.1.5), org.eclipse.dirigible:dirigible-spring-services (7.1.5) +44 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (20.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.eclipse.dirigible:dirigible-server-spring 7.1.5 -...

org.keycloak:keycloak-dependencies-server-all (1.0.2.final), org.keycloak:keycloak-server (1.0.2.final) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (1.0.2.final)

org.keycloak:keycloak-model-jpa MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0.2.final - org.keycloak:keycloak-server...

org.keycloak:keycloak-authz-policy-drools (7.0.1), org.keycloak:keycloak-dependencies-server-all (7.0.1) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (7.0.1)

org.keycloak:keycloak-services MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 7.0.1 - org.keycloak:keycloak-dependencies-server-all 7.0...

com.github.vzakharchenko:keycloak-plugins (1.0.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.0.2) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (8.0.2)

org.keycloak:keycloak-model-jpa MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.0.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

org.keycloak:keycloak-dependencies-server-all (1.6.1.final) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (1.6.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.6.1.final Source cves: CVE-2026-3190 Source...

org.keycloak:keycloak-dependencies-server-all (1.9.8.final), org.keycloak:keycloak-dependencies-server-min (1.9.8.final) +2 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (1.9.8.final)

org.keycloak:keycloak-services MAVEN version 1.9.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.8.final -...

io.phasetwo.keycloak:keycloak-events (0.29), org.keycloak:keycloak-dependencies-server-all (24.0.3) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (24.0.3)

org.keycloak:keycloak-model-jpa MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-events 0.29 - org.keycloak:keycloak-dependencies-server-all 24.0.3...

org.keycloak:keycloak-authz-policy-drools (3.0.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.0.0.cr1) +4 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (3.0.0.cr1)

org.keycloak:keycloak-services MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.0.0.cr1 -...