de.adorsys.keycloak:keycloak-clientregistration-provider (>=1.2, <=3.0), de.adorsys.keycloak:keycloak-provider-extension (>=1.2, <=3.0) +16 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (3.4.3.final)

org.keycloak:keycloak-server-spi-private MAVEN version 3.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.keycloak:keycloak-clientregistration-provider =1.2, =1.2,...

io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.1.1.final), org.keycloak:keycloak-authz-policy-common (4.1.0.final) +10 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.1.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.1.0.final, =4.1.1.final -...

org.keycloak:keycloak-authz-policy-common (4.2.1.final), org.keycloak:keycloak-dependencies-server-min (4.2.1.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.2.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.2.1.final -...

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-authz-policy-common (4.5.0.final) +10 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.5.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

org.keycloak:keycloak-authz-policy-common (4.8.1.final), org.keycloak:keycloak-dependencies-server-min (4.8.1.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.8.1.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.8.1.final -...

org.keycloak:keycloak-authz-policy-common (6.0.0), org.keycloak:keycloak-authz-policy-drools (6.0.0) +15 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (6.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 6.0.0 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +20 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (9.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 -...

city.smartb.i2:keycloak-plugin-client (>=0.11.0, <=0.13.0), city.smartb.i2:keycloak-plugin-domain (>=0.11.0, <=0.13.0) +41 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (18.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - city.smartb.i2:keycloak-plugin-client =0.11.0, =0.11.0, =0.0.1, =0.3.0 -...

net.micedre.keycloak:keycloak-mail-whitelisting (1.5), org.keycloak:keycloak-authz-policy-common (19.0.0) +26 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (19.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - net.micedre.keycloak:keycloak-mail-whitelisting 1.5 -...

com.charlyghislain.keycloak:keycloak-importexport (19.0.0), com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.7, <=1.4.8) +41 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (19.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 19.0.0 -...

fr.cnieg.keycloak:attribute-login-provider (>=1.3.0, <=1.3.1), io.teragroup.keycloak.extension:migration (>=19.0.3.1, <=19.0.3.2) +36 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (19.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.0, =19.0.3.1, =1.11, =1.11,...

com.jalalkiswani:jk-app-service (>=7.0.0-m3, <=7.0.0-m7), com.jalalkiswani:jk-app-web (>=7.0.0-m2, <=7.0.0-m7) +72 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (20.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.jalalkiswani:jk-app-service =7.0.0-m3, =7.0.0-m2, =7.0.0-m2, =7.0.0-m3,...

com.abavilla:fpi-bot-api (>=1.5.1, <=1.5.4), com.abavilla:fpi-bot-api-parent (>=1.5.1, <=1.5.4) +103 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (21.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-bot-api =1.5.1, =1.5.1, =1.7.0, =1.7.0, =1.5.2, =1.5.2, =1.7....

com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +22 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (10.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.2.6), com.github.vzakharchenko:cisco-radius-plugin (1.2.6) +26 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (11.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.2.6 -...

org.keycloak:keycloak-authz-policy-common (11.0.1), org.keycloak:keycloak-dependencies-server-all (11.0.1) +13 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (11.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 11.0.1 -...

com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), fr.cnieg.keycloak:attribute-login-provider (>=1.1.0, <=1.2.4) +16 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (11.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =1.1.0, =1.2.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +30 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (12.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +35 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (13.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.19), com.github.vzakharchenko:cisco-radius-plugin (1.3.19) +36 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (16.1.1)

org.keycloak:keycloak-server-spi-private MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.19 -...