ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +417 more potentially affected by CVE-2026-16104 via org.keycloak:keycloak-server-spi-private (>=2.4.0.cr1, <=26.7.2)

org.keycloak:keycloak-server-spi-private MAVEN version =2.4.0.cr1, =0.1.0, =0.11.0, =0.10.4, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.0.28 and more Source cves: CVE-2026-16104 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18751621...

com.github.vzakharchenko:rad-sec-plugin (1.6.1), com.github.vzakharchenko:radius-disconnect-plugin (1.6.1) +119 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-server-spi-private (>=26.3.0, <=26.6.2)

org.keycloak:keycloak-server-spi-private MAVEN version =26.3.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =5.4.4-26.4, =5.4.4-26.4, =2.4.5, =2.0.3-26.4, =2.3.0 and more Source cves: CVE-2026-9088 Source advisory: MEND:CVE-2026-9088https://vulners.com/mend/MEND:CVE-2026...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +170 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.6.2)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =13.10.0.release and more Source cves: CVE-2026-9088 Source advisory: SNYK:JAVA-ORGKEYCLOAK-17220132...

org.keycloak:keycloak-authz-policy-common (4.0.0.beta3), org.keycloak:keycloak-dependencies-server-min (4.0.0.beta3) +9 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.0.0.beta3)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.0.0.beta3 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +31 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (15.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.11), com.github.vzakharchenko:cisco-radius-plugin (1.4.11) +62 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (21.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.11 -...

org.keycloak:keycloak-authz-policy-common (10.0.0), org.keycloak:keycloak-dependencies-server-all (10.0.0) +12 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (10.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 10.0.0 -...

io.github.johnjcool:keycloak-cas-services (4.8.3.final), it.vige:school-keycloak-rooms (>=1.2.2, <=1.3.0) +11 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.8.3.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.8.3.final -...

org.keycloak:keycloak-authz-policy-common (7.0.1), org.keycloak:keycloak-authz-policy-drools (7.0.1) +13 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (7.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 7.0.1 -...

org.keycloak:keycloak-authz-policy-common (4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.1.final) +9 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (4.2.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.2.1.final -...

org.keycloak:keycloak-authz-policy-common (3.2.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.2.0.cr1) +13 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (3.2.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.2.0.cr1 -...

org.keycloak:keycloak-authz-policy-common (3.3.0.final), org.keycloak:keycloak-authz-policy-drools (3.3.0.final) +13 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (3.3.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.3.0.final -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.0.0-23.0, <=2.5.1-23.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.0.0-23.0, <=2.5.1-23.0) +64 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (23.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.0.0-23.0, =2.0.0-23.0,...

org.keycloak:keycloak-authz-policy-common (3.4.1.final), org.keycloak:keycloak-authz-policy-drools (3.4.1.final) +13 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (3.4.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.4.1.final -...

com.ritense.valtimo:keycloak-iam (>=10.6.0.release, <=11.3.5.release), com.ritense.valtimo:valtimo-dependencies (>=10.6.0.release, <=11.3.5.release) +63 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (21.1.0)

org.keycloak:keycloak-server-spi-private MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.ritense.valtimo:keycloak-iam =10.6.0.release, =10.6.0.release, =0.126,...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.3), com.github.vzakharchenko:cisco-radius-plugin (1.4.3) +32 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (17.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.3 -...

org.eclipse.dirigible:dirigible-server-spring (7.1.5), org.eclipse.dirigible:dirigible-spring-services (7.1.5) +44 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (20.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.eclipse.dirigible:dirigible-server-spring 7.1.5 -...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=4.0.3-25.0, <=4.0.5-25.0) +33 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (25.0.6)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - ch.iterial.keycloak.plugins:keycloak-directus-plugin =0.1.0, =4.0.3-25.0,...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.2.1), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.2.1) +61 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (23.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.2.1 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.12, <=1.3.14), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.12, <=1.3.14) +37 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (15.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.12, =1.3.12, =1.3.12,...