de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.7.0, <=0.7.1), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (>=1.2.2.final, <=1.2.3.final) +51 more potentially affected by CVE-2018-14658 via org.keycloak:keycloak-core (1.9.0.final)

org.keycloak:keycloak-core MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.7.0, =1.2.2.final, =1.2.2.final, =1.2.2.final,...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.0), org.jboss.windup.web:test-authentication-client (>=4.0.0.beta1, <=4.0.1.final) +50 more potentially affected by CVE-2018-14658 via org.keycloak:keycloak-core (2.1.0.final)

org.keycloak:keycloak-core MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.0 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.1), org.keycloak:keycloak-adapter-core (2.5.4.final) +54 more potentially affected by CVE-2018-14658 via org.keycloak:keycloak-core (2.5.4.final)

org.keycloak:keycloak-core MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.1 - org.keycloak:keycloak-adapter-core 2.5.4.fin...

com.github.alexcojocaru:elasticsearch-maven-plugin (1.4), com.github.joschi:dropwizard-elasticsearch (0.2.1) +2 more potentially affected by CVE-2018-3824 via org.elasticsearch:elasticsearch (1.0.2)

org.elasticsearch:elasticsearch MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.alexcojocaru:elasticsearch-maven-plugin 1.4 - com.github.joschi:dropwizard-elasticsear...

Dropwizard-Validation Code Execution

The vulnerability of the Dropwizard-Validation software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with privileges of the Dropwizard service account...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.2.1, <=0.3.0), org.keycloak:keycloak-account-api (1.5.0-final) +84 more potentially affected by CVE-2022-1466 via org.keycloak:keycloak-core (1.5.0-final)

org.keycloak:keycloak-core MAVEN version 1.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.2.1, =0.3.0 - org.keycloak:keycloak-account-api...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.4.0, <=0.4.1), org.hawkular.accounts:hawkular-accounts (>=2.0.0.final, <=2.0.6.final) +98 more potentially affected by CVE-2020-27826 via org.keycloak:keycloak-core (1.6.1.final)

org.keycloak:keycloak-core MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.4.0, =2.0.0.final, =2.0.0.final, =2.0.0.final,...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.3), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (1.2.6.final) +55 more potentially affected by CVE-2020-27826 via org.keycloak:keycloak-core (1.9.4.final)

org.keycloak:keycloak-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.3 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.2.1, <=0.3.0), org.keycloak:keycloak-account-api (1.5.0-final) +84 more potentially affected by CVE-2020-27826 via org.keycloak:keycloak-core (1.5.0-final)

org.keycloak:keycloak-core MAVEN version 1.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.2.1, =0.3.0 - org.keycloak:keycloak-account-api...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.4.0, <=0.4.1), org.hawkular.accounts:hawkular-accounts (>=2.0.0.final, <=2.0.6.final) +98 more potentially affected by CVE-2021-20202 via org.keycloak:keycloak-core (1.6.1.final)

org.keycloak:keycloak-core MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.4.0, =2.0.0.final, =2.0.0.final, =2.0.0.final,...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.2), org.keycloak:keycloak-adapter-core (1.9.3.final) +43 more potentially affected by CVE-2021-20202 via org.keycloak:keycloak-core (1.9.3.final)

org.keycloak:keycloak-core MAVEN version 1.9.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.2 - org.keycloak:keycloak-adapter-core 1.9.3.fin...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.7.3), io.apiman.plugins:apiman-plugins-keycloak-oauth-policy (1.2.6.final) +55 more potentially affected by CVE-2021-20202 via org.keycloak:keycloak-core (1.9.4.final)

org.keycloak:keycloak-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.7.3 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.0), org.jboss.windup.web:test-authentication-client (>=4.0.0.beta1, <=4.0.1.final) +50 more potentially affected by CVE-2021-20202 via org.keycloak:keycloak-core (2.1.0.final)

org.keycloak:keycloak-core MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.0 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.1), org.keycloak:keycloak-adapter-core (2.5.4.final) +54 more potentially affected by CVE-2021-20202 via org.keycloak:keycloak-core (2.5.4.final)

org.keycloak:keycloak-core MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.1 - org.keycloak:keycloak-adapter-core 2.5.4.fin...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.2.1, <=0.3.0), org.keycloak:keycloak-account-api (1.5.0-final) +84 more potentially affected by CVE-2021-20202 via org.keycloak:keycloak-core (1.5.0-final)

org.keycloak:keycloak-core MAVEN version 1.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.2.1, =0.3.0 - org.keycloak:keycloak-account-api...

org.sonatype.goodies.dropwizard:dropwizard-support-swagger (>=1.0.0, <=1.0.2) potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.13.4)

org.webjars:swagger-ui MAVEN version 3.13.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.sonatype.goodies.dropwizard:dropwizard-support-swagger =1.0.0, =1.0.2 Source cves: CVE-2018-25031 Source...

io.bootique.liquibase:bootique-liquibase (>=1.0.rc1, <=1.0), io.dropwizard:dropwizard-migrations (1.3.3) +2 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.6.0)

org.liquibase:liquibase-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - io.bootique.liquibase:bootique-liquibase =1.0.rc1, =1.0 - io.dropwizard:dropwizard-migrations 1.3.3 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (>=0.2.1, <=0.3.0), org.keycloak:keycloak-account-api (1.5.0-final) +84 more potentially affected by CVE-2020-1714 via org.keycloak:keycloak-core (1.5.0-final)

org.keycloak:keycloak-core MAVEN version 1.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard =0.2.1, =0.3.0 - org.keycloak:keycloak-account-api...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.0), org.jboss.windup.web:test-authentication-client (>=4.0.0.beta1, <=4.0.1.final) +50 more potentially affected by CVE-2020-1714 via org.keycloak:keycloak-core (2.1.0.final)

org.keycloak:keycloak-core MAVEN version 2.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.0 -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.1), org.keycloak:keycloak-adapter-core (2.5.4.final) +54 more potentially affected by CVE-2020-1714 via org.keycloak:keycloak-core (2.5.4.final)

org.keycloak:keycloak-core MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.1 - org.keycloak:keycloak-adapter-core 2.5.4.fin...