io.kokuwa.keycloak:keycloak-event-metrics (1.0.0), io.phasetwo.keycloak:keycloak-events (>=0.13, <=0.17) +9 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (21.1.1)

org.keycloak:keycloak-model-jpa MAVEN version 21.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 1.0.0 - io.phasetwo.keycloak:keycloak-events =0.13,...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.1.0-alpha.2, <=1.1.0-beta.1), org.keycloak:keycloak-account-freemarker (1.1.0.final) +2 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (1.1.0.final)

org.keycloak:keycloak-services MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.1.0-alpha.2, =1.1.0-beta.1 -...

io.phasetwo.keycloak:keycloak-extensions (0.1), net.optionfactory.keycloak:optionfactory-keycloak-provisioning-api (4.0) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (22.0.3)

org.keycloak:keycloak-model-jpa MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-extensions 0.1 -...

fr.cnieg.keycloak:attribute-login-provider (1.3.7), org.keycloak:keycloak-adapter-core (22.0.2) +50 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (22.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.7 -...

org.keycloak:keycloak-account-freemarker (1.2.0.cr1), org.keycloak:keycloak-broker-oidc (1.2.0.cr1) +8 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (1.2.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.2.0.cr1 - org.keycloak:keycloak-broker-oidc 1.2.0.cr...

org.keycloak:keycloak-account-freemarker (1.8.0.alpha1), org.keycloak:keycloak-broker-oidc (1.8.0.alpha1) +9 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (1.8.0.alpha1)

org.keycloak:keycloak-services MAVEN version 1.8.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.alpha1 - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-dependencies-server-all (1.8.1.final) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (1.8.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.8.1.final Source cves: CVE-2026-3190 Source...

org.keycloak:keycloak-authz-policy-common (4.8.2.final), org.keycloak:keycloak-dependencies-server-min (4.8.2.final) +9 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (4.8.2.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.8.2.final -...

io.phasetwo.keycloak:keycloak-orgs (>=0.58, <=0.66), net.optionfactory.keycloak:optionfactory-keycloak-provisioning-api (5.3) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (23.0.7)

org.keycloak:keycloak-model-jpa MAVEN version 23.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.58, =0.66 -...

org.keycloak:keycloak-dependencies-server-all (1.0-rc-2), org.keycloak:keycloak-server (1.0-rc-2) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (1.0-rc-2)

org.keycloak:keycloak-model-jpa MAVEN version 1.0-rc-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0-rc-2 - org.keycloak:keycloak-server 1.0-rc-2...

org.keycloak:keycloak-dependencies-server-all (3.2.1.final), org.keycloak:keycloak-server-feature-pack (3.2.1.final) +1 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (3.2.1.final)

org.keycloak:keycloak-model-jpa MAVEN version 3.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 3.2.1.final -...

net.optionfactory.keycloak:optionfactory-keycloak-provisioning-api (2.0), org.keycloak:keycloak-dependencies-server-all (20.0.0) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (20.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-provisioning-api 2.0 -...

org.keycloak:keycloak-dependencies-server-all (1.2.0.cr1) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (1.2.0.cr1)

org.keycloak:keycloak-model-jpa MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.2.0.cr1 Source cves: CVE-2026-3190 Source...

org.keycloak:keycloak-authz-policy-common (4.7.0.final), org.keycloak:keycloak-dependencies-server-min (4.7.0.final) +9 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (4.7.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.7.0.final -...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-dependencies-server-min (4.5.0.final) +3 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (4.5.0.final)

org.keycloak:keycloak-services MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-orgs (>=0.37, <=0.39) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (22.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.37, =0.39 -...

org.keycloak:keycloak-dependencies-server-all (2.5.5.final) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (2.5.5.final)

org.keycloak:keycloak-model-jpa MAVEN version 2.5.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.5.final Source cves: CVE-2026-3190 Source...

org.keycloak:keycloak-dependencies-server-all (1.7.0.cr1) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (1.7.0.cr1)

org.keycloak:keycloak-model-jpa MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.7.0.cr1 Source cves: CVE-2026-3190 Source...

org.keycloak:keycloak-authz-policy-common (3.3.0.cr2), org.keycloak:keycloak-authz-policy-drools (3.3.0.cr2) +13 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.3.0.cr2)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.cr2 -...

org.keycloak:keycloak-dependencies-server-all (2.2.0.cr1) potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (2.2.0.cr1)

org.keycloak:keycloak-model-jpa MAVEN version 2.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.2.0.cr1 Source cves: CVE-2026-3190 Source...