com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-59647 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.11)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-59647 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18513020...

com.srcclr:srcclr-maven-plugin (>=3.1.23, <=3.1.25), org.apache.camel.quarkus:camel-quarkus-opensearch (3.24.0) +20 more potentially affected by CVE-2026-59646 via org.bouncycastle:bctls-fips (>=1.0.9, <=1.0.19)

org.bouncycastle:bctls-fips MAVEN version =1.0.9, =3.1.23, =19.0.0, =14.6.5.3, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.6.4, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.9.4 and more Source cves: CVE-2026-59646 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18512890...

org.apache.camel.springboot:camel-opensearch-starter (4.12.0), org.apache.camel:camel-opensearch (4.12.0) +11 more potentially affected by CVE-2026-59638 via org.bouncycastle:bctls-fips (2.0.19)

org.bouncycastle:bctls-fips MAVEN version 2.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.bouncycastle:bctls-fips and may be impacted: - org.apache.camel.springboot:camel-opensearch-starter 4.12.0 - org.apache.camel:camel-opensearch 4.12.0 -...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.11.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-59647 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.11)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-59647 Source advisory: MEND:CVE-2026-59647...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.11), com.github.vzakharchenko:cisco-radius-plugin (1.4.11) +22 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (21.0.0)

org.keycloak:keycloak-services MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.11 -...

dev.jcputney:keycloak-theme-additional-info-extension (>=1.1.4, <=1.1.5), org.keycloak:keycloak-crypto-fips1402 (23.0.2) +13 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (23.0.2)

org.keycloak:keycloak-services MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - dev.jcputney:keycloak-theme-additional-info-extension =1.1.4, =1.1.5 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.5.6-24.0, <=2.7.4-24.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=2.7.4-24.0) +24 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (24.0.2)

org.keycloak:keycloak-services MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.5.6-24.0, =2.5.6-24.0, =0.4, =0.6 -...

io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-magic-link (>=0.16, <=0.19) +18 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (22.0.0)

org.keycloak:keycloak-services MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.16, =0.37, =0.9, =1.6, =2.1 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.11), io.phasetwo.keycloak:keycloak-events (>=0.30, <=0.33) +19 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (25.0.0)

org.keycloak:keycloak-services MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.11 - io.phasetwo.keycloak:keycloak-events =0.30,...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +15 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (24.0.5)

org.keycloak:keycloak-services MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 -...

io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-magic-link (>=0.16, <=0.19) +18 more potentially affected by CVE-2025-14559 via org.keycloak:keycloak-services (22.0.0)

org.keycloak:keycloak-services MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.16, =0.37, =0.9, =1.6, =2.1 -...

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-crypto-fips1402 (25.0.5) +13 more potentially affected by CVE-2025-14559 via org.keycloak:keycloak-services (25.0.5)

org.keycloak:keycloak-services MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

de.adorsys.sts:keycloak-storage-provider (>=1.1.23, <=1.1.28), io.phasetwo.keycloak:keycloak-events (0.20) +17 more potentially affected by CVE-2025-14559 via org.keycloak:keycloak-services (22.0.4)

org.keycloak:keycloak-services MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.1.23, =0.20, =0.12, =0.14 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=3.0.1-25.0, <=4.0.1-25.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0) +25 more potentially affected by CVE-2025-14559 via org.keycloak:keycloak-services (25.0.1)

org.keycloak:keycloak-services MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =3.0.1-25.0, =3.0.1-25.0, =4.0.1-25.0 -...

org.keycloak:keycloak-crypto-fips1402 (25.0.3), org.keycloak:keycloak-dependencies-server-all (25.0.3) +12 more potentially affected by CVE-2025-14559 via org.keycloak:keycloak-services (25.0.3)

org.keycloak:keycloak-services MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-crypto-fips1402 25.0.3 - org.keycloak:keycloak-dependencies-server-all 25.0....

fr.cnieg.keycloak:attribute-login-provider (>=1.3.9, <=1.3.10), io.phasetwo.keycloak:keycloak-events (>=0.21, <=0.22) +20 more potentially affected by CVE-2026-1035 via org.keycloak:keycloak-services (22.0.5)

org.keycloak:keycloak-services MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.9, =0.21, =0.44, =0.46 -...