com.eurodyn.qlack2.util:qlack2-util-sso (>=2.3.5, <=2.3.19), com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (>=24.3.0.0, <=26.7.3.0) +92 more potentially affected by CVE-2026-18212 via org.keycloak:keycloak-saml-core (>=1.2.0.cr1, <=26.7.3)

org.keycloak:keycloak-saml-core MAVEN version =1.2.0.cr1, =2.3.5, =24.3.0.0, =24.3.0.0, =2.5.6-24.0, =1.0.0-25.0, =0.1.0, =2.1, =8.1, =2.1, =4.1.0, =4.0.3, =1.0.0, =26.3.0, =26.1.0, =26.4.0, =26.7.3 and more Source cves: CVE-2026-18212 Source advisory:...

Replay Attack

Overview org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak. Affected versions of this package are vulnerable to Replay Attack through IdP-initiated broker logins in the services/src/main/java/org/keycloak/broker/saml component. An attacker can hijack a user...

Improper Handling of Extra Parameters

Overview org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak. Affected versions of this package are vulnerable to Improper Handling of Extra Parameters through the generateRedirectUri logic in org.keycloak.saml.BaseSAML2BindingBuilder. An attacker can cause a...

com.eurodyn.qlack2.util:qlack2-util-sso (>=2.3.5, <=2.3.19), com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (>=24.3.0.0, <=26.7.3.0) +92 more potentially affected by CVE-2026-18217 via org.keycloak:keycloak-saml-core (>=1.2.0.cr1, <=26.7.5)

org.keycloak:keycloak-saml-core MAVEN version =1.2.0.cr1, =2.3.5, =24.3.0.0, =24.3.0.0, =2.5.6-24.0, =1.0.0-25.0, =0.1.0, =2.1, =8.1, =2.1, =4.1.0, =4.0.3, =1.0.0, =26.3.0, =26.1.0, =26.4.0, =26.7.5 and more Source cves: CVE-2026-18217 Source advisory:...

org.keycloak:keycloak-dependencies-server-all (1.9.4.final), org.keycloak:keycloak-saml-adapter-api-public (1.9.4.final) +19 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.9.4.final)

org.keycloak:keycloak-saml-core MAVEN version 1.9.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.4.final -...

org.keycloak:keycloak-broker-saml (1.2.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.2.0.cr1) +1 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.2.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.2.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-dependencies-server-all (19.0.2), org.keycloak:keycloak-guides (19.0.2) +21 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (19.0.2)

org.keycloak:keycloak-saml-core MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 19.0.2 - org.keycloak:keycloak-guides 19.0.2 -...

org.keycloak:keycloak-dependencies-server-all (2.3.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (2.3.0.cr1) +21 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (2.3.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.3.0.cr1 -...

org.keycloak:keycloak-saml-adapter-api-public (4.5.0.final), org.keycloak:keycloak-saml-adapter-core (4.5.0.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.5.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.5.0.final -...

org.keycloak:keycloak-broker-saml (1.3.0.final), org.keycloak:keycloak-dependencies-server-all (1.3.0.final) +3 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.3.0.final)

org.keycloak:keycloak-saml-core MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.3.0.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-broker-saml (1.7.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.7.0.cr1) +19 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.7.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.7.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-api-docs-dist (18.0.1), org.keycloak:keycloak-dependencies-server-all (18.0.1) +27 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (18.0.1)

org.keycloak:keycloak-saml-core MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-api-docs-dist 18.0.1 - org.keycloak:keycloak-dependencies-server-all 18.0....

org.keycloak:keycloak-saml-adapter-api-public (4.8.2.final), org.keycloak:keycloak-saml-adapter-core (4.8.2.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.8.2.final)

org.keycloak:keycloak-saml-core MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.8.2.final -...

org.keycloak:keycloak-dependencies-server-all (2.5.4.final), org.keycloak:keycloak-saml-adapter-api-public (2.5.4.final) +21 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (2.5.4.final)

org.keycloak:keycloak-saml-core MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.4.final -...

org.keycloak:keycloak-saml-adapter-api-public (4.8.1.final), org.keycloak:keycloak-saml-adapter-core (4.8.1.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.8.1.final)

org.keycloak:keycloak-saml-core MAVEN version 4.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.8.1.final -...

org.keycloak:keycloak-broker-saml (1.8.0.cr3), org.keycloak:keycloak-dependencies-server-all (1.8.0.cr3) +19 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.8.0.cr3)

org.keycloak:keycloak-saml-core MAVEN version 1.8.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.8.0.cr3 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-dependencies-server-all (2.1.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (2.1.0.cr1) +21 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (2.1.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.1.0.cr1 -...

org.keycloak:keycloak-saml-adapter-api-public (4.0.0.final), org.keycloak:keycloak-saml-adapter-core (4.0.0.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.0.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.0.0.final -...

org.keycloak:keycloak-saml-adapter-api-public (4.1.0.final), org.keycloak:keycloak-saml-adapter-core (4.1.0.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.1.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.1.0.final -...

org.keycloak:keycloak-dependencies-server-all (7.0.1), org.keycloak:keycloak-saml-adapter-api-public (7.0.1) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (7.0.1)

org.keycloak:keycloak-saml-core MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 7.0.1 - org.keycloak:keycloak-saml-adapter-api-publ...