org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-37977 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-crypto-fips1402 (25.0.5) +13 more potentially affected by CVE-2026-4282 via org.keycloak:keycloak-services (25.0.5)

org.keycloak:keycloak-services MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

de.adorsys.sts:keycloak-storage-provider (>=1.2.0, <=1.2.4), net.optionfactory.keycloak:optionfactory-keycloak-apple-identity-provider (>=6.5, <=6.9) +23 more potentially affected by CVE-2026-4282 via org.keycloak:keycloak-services (25.0.2)

org.keycloak:keycloak-services MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.2.0, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5, =6.5,...

fr.cnieg.keycloak:attribute-login-provider (1.4.9), io.github.shahrear002:keycloak-universal-sms (>=1.0.0, <=1.0.1) +22 more potentially affected by CVE-2026-4634 via org.keycloak:keycloak-services (24.0.4)

org.keycloak:keycloak-services MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.9 - io.github.shahrear002:keycloak-universal-sms...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-4634 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-4325 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

io.github.jeff-tian:keycloak-services-social-weixin (>=0.5.35, <=0.5.40), org.keycloak:keycloak-dependencies-server-all (23.0.0) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (23.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.github.jeff-tian:keycloak-services-social-weixin =0.5.35, =0.5.40 -...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-guides (25.0.5) +5 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (25.0.5)

org.keycloak:keycloak-model-jpa MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 - org.keycloak:keycloak-guides 25.0.5 -...

io.phasetwo.keycloak:keycloak-events (0.29), org.keycloak:keycloak-dependencies-server-all (24.0.3) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (24.0.3)

org.keycloak:keycloak-model-jpa MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-events 0.29 - org.keycloak:keycloak-dependencies-server-all 24.0.3...

org.keycloak:keycloak-dependencies-server-all (19.0.0), org.keycloak:keycloak-guides (19.0.0) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (19.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - org.keycloak:keycloak-dependencies-server-all 19.0.0 - org.keycloak:keycloak-guides 19.0.0 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.4), org.keycloak:keycloak-dependencies-server-all (20.0.4) +10 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (20.0.4)

org.keycloak:keycloak-services MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.4 -...

fr.cnieg.keycloak:attribute-login-provider (1.4.2), io.phasetwo.keycloak:keycloak-orgs (>=0.53, <=0.57) +24 more potentially affected by CVE-2026-4874 via org.keycloak:keycloak-services (23.0.6)

org.keycloak:keycloak-services MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.2 - io.phasetwo.keycloak:keycloak-orgs =0.53, =0.57...

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1190 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.5.6)

org.codehaus.plexus:plexus-utils MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - ai.mattmann.mnemosyne:cas-crawler 1.11.0 - ai.mattmann.mnemosyne:cas-filemgr 1.11.0 -...

com.realrunners:scalate-maven-plugin_2.13 (0.0.4), com.stephenn:scalate-maven-plugin_2.12 (>=0.0.1, <=0.0.2) +15 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.2)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.realrunners:scalate-maven-plugin2.13 0.0.4 - com.stephenn:scalate-maven-plugin2.12 =0.0.1,...

com.googlecode.apparat:apparat-maven-plugin (1.0.rc4), org.apache.maven:apache-maven (3.0-beta-1) +33 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.0.3)

org.codehaus.plexus:plexus-utils MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.googlecode.apparat:apparat-maven-plugin 1.0.rc4 - org.apache.maven:apache-maven 3.0-beta-1 ...

com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin (>=1.5.2, <=1.6.40), com.anaptecs.jeaf.generator:jeaf-generator-test-message-constants (>=1.5.13, <=1.6.40) +146 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (2.1)

org.codehaus.plexus:plexus-utils MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.anaptecs.jeaf.generator:jeaf-generator-maven-plugin =1.5.2, =1.5.13, =4.1.1, =3.1.12, =1.0,...

au.net.causal.maven.native-security:natsec-maven-plugin (1.0), org.apache.maven.archiva:archiva-artifact-converter (>=1.0-alpha-1, <=1.0.2) +123 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.net.causal.maven.native-security:natsec-maven-plugin 1.0 -...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +17837 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =1.9.0, =1.9.0, =1.9.0, =0.1, =0.1.0, =0.0.1, =0.0.6, =0.1.10, =0.1.3, =0.0.1, =0.0.1, =0.2.0, =0.2.11 and more Source cves: CVE-2025-67030 Source advisory: OSV:GHSA-6FMV-XXPF-W3CW...

org.apache.geronimo.devtools:maven-eclipsepde-plugin (>=1.0, <=1.2), org.apache.maven.plugins:maven-release-plugin (>=2.0-beta-5, <=2.0-beta-7) +45 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.3)

org.codehaus.plexus:plexus-utils MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.geronimo.devtools:maven-eclipsepde-plugin =1.0, =2.0-beta-5, =1.0-alpha-1, =1.0-beta-1...