de.ahus1.keycloak.dropwizard:keycloak-dropwizard (2.0.0), fr.cnieg.keycloak:attribute-login-provider (1.3.5) +59 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (21.1.2)

org.keycloak:keycloak-server-spi-private MAVEN version 21.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 2.0.0 -...

com.jalalkiswani:j-app-service (>=7.0.0-pre-release, <=7.0.2), com.jalalkiswani:j-app-web (>=7.0.0-pre-release, <=7.0.2) +84 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (22.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.jalalkiswani:j-app-service =7.0.0-pre-release, =7.0.0-pre-release,...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.keycloak:keycloak-account-freemarker (1.0-rc-1) +4 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.0-rc-1)

org.keycloak:keycloak-services MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...

org.keycloak:keycloak-account-freemarker (1.0-rc-2), org.keycloak:keycloak-dependencies-server-all (1.0-rc-2) +3 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.0-rc-2)

org.keycloak:keycloak-services MAVEN version 1.0-rc-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-rc-2 - org.keycloak:keycloak-dependencies-server-al...

org.keycloak:keycloak-account-freemarker (1.0.2.final), org.keycloak:keycloak-dependencies-server-all (1.0.2.final) +3 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.0.2.final)

org.keycloak:keycloak-services MAVEN version 1.0.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.2.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.keycloak:keycloak-account-freemarker (1.0.5.final) +4 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.0.5.final)

org.keycloak:keycloak-services MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-dependencies-server-min (10.0.0) +5 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (10.0.0)

org.keycloak:keycloak-services MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 - org.keycloak:keycloak-dependencies-server-m...

com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +15 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (10.0.2)

org.keycloak:keycloak-services MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 - com.github.vzakharchenko:keycloak-plugins 1.2...

org.keycloak:keycloak-dependencies-server-all (11.0.1), org.keycloak:keycloak-dependencies-server-min (11.0.1) +6 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (11.0.1)

org.keycloak:keycloak-services MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.1 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-authz-policy-drools (3.4.1.final), org.keycloak:keycloak-dependencies-server-all (3.4.1.final) +6 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (3.4.1.final)

org.keycloak:keycloak-services MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.1.final -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.11), com.github.vzakharchenko:cisco-radius-plugin (1.4.11) +62 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (21.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.11 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.5.6-24.0, <=2.7.4-24.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=2.7.4-24.0) +57 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (24.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.5.6-24.0, =2.5.6-24.0,...

fr.cnieg.keycloak:attribute-login-provider (1.4.11), io.phasetwo.keycloak:keycloak-events (>=0.30, <=0.33) +29 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (25.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.11 -...

org.keycloak:keycloak-authz-policy-common (4.6.0.final), org.keycloak:keycloak-dependencies-server-min (4.6.0.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.6.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.6.0.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.0.2, <=1.1.0-alpha.1), org.keycloak:keycloak-account-freemarker (1.0.4.final) +4 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.0.4.final)

org.keycloak:keycloak-services MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.0.2, =1.1.0-alpha.1 -...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=4.0.3-25.0, <=4.0.5-25.0) +33 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (25.0.6)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - ch.iterial.keycloak.plugins:keycloak-directus-plugin =0.1.0, =4.0.3-25.0,...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +64 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (24.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 ...

org.keycloak:keycloak-authz-policy-common (2.4.0.final), org.keycloak:keycloak-authz-policy-drools (2.4.0.final) +12 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (2.4.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 2.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 2.4.0.final -...

com.abavilla:fpi-framework-core (>=1.6.2, <=1.6.4), com.abavilla:fpi-framework-pom (>=1.6.2, <=1.6.4) +88 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (20.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-framework-core =1.6.2, =1.6.2, =0.4.7-20.0.3, =0.4.7-20.0.3,...

org.keycloak:keycloak-authz-policy-common (4.8.2.final), org.keycloak:keycloak-dependencies-server-min (4.8.2.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.8.2.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.8.2.final -...