city.smartb.i2:keycloak-plugin-domain (>=0.10.4, <=0.10.5-experimental), com.github.vzakharchenko:chillispot-radius-plugin (1.4.4) +41 more potentially affected by CVE-2026-0871 via org.keycloak:keycloak-server-spi-private (18.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - city.smartb.i2:keycloak-plugin-domain =0.10.4, =0.1, =1.0, =1.1, =1.3, =1.4 -...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +381 more potentially affected by CVE-2025-13881 via org.keycloak:keycloak-server-spi-private (>=2.4.0.cr1, <=26.5.1)

org.keycloak:keycloak-server-spi-private MAVEN version =2.4.0.cr1, =0.1.0, =0.11.0, =0.10.4, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.0.28 and more Source cves: CVE-2025-13881 Source advisory: MEND:CVE-2025-13881...

EUVD-2023-53545

Malicious code in bioql PyPI...

CVE-2023-24456

Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +15 more potentially affected by CVE-2025-3910 via org.keycloak:keycloak-services (24.0.5)

org.keycloak:keycloak-services MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 -...