org.keycloak:keycloak-crypto-fips1402 (25.0.3), org.keycloak:keycloak-dependencies-server-all (25.0.3) +12 more potentially affected by CVE-2026-9086 via org.keycloak:keycloak-services (25.0.3)

org.keycloak:keycloak-services MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-crypto-fips1402 25.0.3 - org.keycloak:keycloak-dependencies-server-all 25.0....

com.vaadin:vaadin-jandex (>=24.10.0, <=24.10.11), com.vaadin:vaadin-platform-javadoc (>=24.10.0, <=24.10.11) +5 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.10.0, <=24.10.11)

com.vaadin:vaadin MAVEN version =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.4 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.23), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.23) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.8.0, <=24.9.23)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.9 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.vaadin:vaadin-jandex (>=24.5.0, <=24.7.16), com.vaadin:vaadin-platform-javadoc (>=24.5.0, <=24.7.16) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.5.0, <=24.7.16)

com.vaadin:vaadin MAVEN version =24.5.0, =24.5.0, =24.5.0, =24.7.16 - com.vaadin:vaadin-testbench-unit 9.3.15 - com.vaadin:vaadin-testbench-unit-junit5 9.3.15 - com.vaadin:vaadin-testbench-unit-quarkus 9.3.15 - com.vaadin:vaadin-testbench-unit-shared 9.3.15 Source cves: CVE-2026-110737 Source...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.23), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.23) +4 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.8.0, <=24.9.23)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.9 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

com.vaadin:vaadin-jandex (>=24.8.0, <=24.9.22), com.vaadin:vaadin-platform-javadoc (>=24.8.0, <=24.9.22) +4 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=24.8.0, <=24.9.22)

com.vaadin:vaadin MAVEN version =24.8.0, =24.8.0, =24.8.0, =9.4.4, =9.4.4, =9.4.4, =9.4.4, =9.5.8 Source cves: CVE-2026-107588 Source advisory: SNYK:JAVA-COMVAADIN-21691577...

com.vaadin:vaadin-jandex (>=24.5.0, <=24.7.15), com.vaadin:vaadin-platform-javadoc (>=24.5.0, <=24.7.15) +4 more potentially affected by CVE-2026-107588 via com.vaadin:vaadin (>=24.5.0, <=24.7.15)

com.vaadin:vaadin MAVEN version =24.5.0, =24.5.0, =24.5.0, =24.7.15 - com.vaadin:vaadin-testbench-unit 9.3.15 - com.vaadin:vaadin-testbench-unit-junit5 9.3.15 - com.vaadin:vaadin-testbench-unit-quarkus 9.3.15 - com.vaadin:vaadin-testbench-unit-shared 9.3.15 Source cves: CVE-2026-107588 Source...

io.helidon.webserver.testing.junit5:helidon-webserver-testing-junit5-websocket (>=27.0.0-m1, <=27.0.0), io.helidon:helidon-all (>=27.0.0-m1, <=27.0.0) potentially affected by CVE-2026-101584 via io.helidon.webclient:helidon-webclient-websocket (>=27.0.0-m1, <=27.0.0)

io.helidon.webclient:helidon-webclient-websocket MAVEN version =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0 Source cves: CVE-2026-101584 Source advisory: MEND:CVE-2026-101584...

io.helidon.webclient:helidon-webclient-grpc (>=27.0.0-m1, <=27.0.0), io.helidon.webclient:helidon-webclient-grpc-tracing (>=27.0.0-m1, <=27.0.0) +3 more potentially affected by CVE-2026-101572 via io.helidon.webclient:helidon-webclient-http2 (>=27.0.0-m1, <=27.0.0)

io.helidon.webclient:helidon-webclient-http2 MAVEN version =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0 Source cves: CVE-2026-101572 Source advisory: MEND:CVE-2026-101572...

com.vaadin:vaadin-jandex (>=24.10.0, <=24.10.9), com.vaadin:vaadin-platform-javadoc (>=24.10.0, <=24.10.9) +5 more potentially affected by CVE-2026-91860 via com.vaadin:vaadin (>=24.10.0, <=24.10.9)

com.vaadin:vaadin MAVEN version =24.10.0, =24.10.0, =24.10.0, =9.6.1, =9.6.1, =9.6.1, =9.6.1, =9.6.2 - io.github.adumeige.vaadin-reactflow:vaadin-reactflow-component 1.0.0 Source cves: CVE-2026-91860 Source advisory: SNYK:JAVA-COMVAADIN-21717012...

io.helidon.webserver.testing.junit5:helidon-webserver-testing-junit5-grpc (27.0.0-m1), io.helidon.webserver.testing.junit5:helidon-webserver-testing-junit5-http2 (27.0.0-m1) +5 more potentially affected by CVE-2026-83280 via io.helidon.webserver:helidon-webserver-http2 (27.0.0-m1)

io.helidon.webserver:helidon-webserver-http2 MAVEN version 27.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.helidon.webserver:helidon-webserver-http2 and may be impacted: -...

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-crypto-fips1402 (25.0.5) +13 more potentially affected by CVE-2026-2092 via org.keycloak:keycloak-services (25.0.5)

org.keycloak:keycloak-services MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

dev.jcputney:keycloak-theme-additional-info-extension (>=1.1.4, <=1.1.5), org.keycloak:keycloak-crypto-fips1402 (23.0.2) +13 more potentially affected by CVE-2026-2092 via org.keycloak:keycloak-services (23.0.2)

org.keycloak:keycloak-services MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - dev.jcputney:keycloak-theme-additional-info-extension =1.1.4, =1.1.5 -...

org.keycloak:keycloak-guides (22.0.3), org.keycloak:keycloak-guides-maven-plugin (22.0.3) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (22.0.3)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 22.0.3 - org.keycloak:keycloak-guides-maven-plugin...

org.keycloak:keycloak-guides (24.0.1), org.keycloak:keycloak-guides-maven-plugin (24.0.1) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (24.0.1)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 24.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 24.0.1 - org.keycloak:keycloak-guides-maven-plugin...

org.keycloak:keycloak-guides (22.0.0), org.keycloak:keycloak-guides-maven-plugin (22.0.0) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (22.0.0)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 22.0.0 - org.keycloak:keycloak-guides-maven-plugin...

org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +4 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (23.0.3)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin...

Fedora 45 : junit5 / ongres-scram / ongres-stringprep / postgresql-jdbc (2026-ef76680eea)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ef76680eea advisory. postgresql-jdbc update and CVE fix. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...

fr.cnieg.keycloak:attribute-login-provider (1.3.5), io.phasetwo.keycloak:keycloak-magic-link (0.15) +14 more potentially affected by CVE-2026-9802 via org.keycloak:keycloak-services (21.1.2)

org.keycloak:keycloak-services MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.5 - io.phasetwo.keycloak:keycloak-magic-link 0.15 -...

org.keycloak:keycloak-dependencies-server-all (24.0.3), org.keycloak:keycloak-guides (24.0.3) +6 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (24.0.3)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.3 - org.keycloak:keycloak-guides...