org.keycloak:keycloak-guides (20.0.4), org.keycloak:keycloak-guides-maven-plugin (20.0.4) +2 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (20.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.4 - org.keycloak:keycloak-guides-maven-plugin 20.0.4...

org.keycloak:keycloak-guides (21.0.0), org.keycloak:keycloak-guides-maven-plugin (21.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (21.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 21.0.0 - org.keycloak:keycloak-guides-maven-plugin 21.0.0...

org.keycloak:keycloak-guides (24.0.3), org.keycloak:keycloak-guides-maven-plugin (24.0.3) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (24.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.3 - org.keycloak:keycloak-guides-maven-plugin 24.0.3...

org.keycloak:keycloak-guides (25.0.2), org.keycloak:keycloak-guides-maven-plugin (25.0.2) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (25.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.2 - org.keycloak:keycloak-guides-maven-plugin 25.0.2...

org.keycloak:keycloak-guides (23.0.0), org.keycloak:keycloak-guides-maven-plugin (23.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.0 - org.keycloak:keycloak-guides-maven-plugin 23.0.0...

org.keycloak:keycloak-guides (23.0.1), org.keycloak:keycloak-guides-maven-plugin (23.0.1) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.1 - org.keycloak:keycloak-guides-maven-plugin 23.0.1...

org.keycloak:keycloak-guides (23.0.4), org.keycloak:keycloak-guides-maven-plugin (23.0.4) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.4 - org.keycloak:keycloak-guides-maven-plugin 23.0.4...

org.keycloak:keycloak-guides (22.0.0), org.keycloak:keycloak-guides-maven-plugin (22.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (22.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.0 - org.keycloak:keycloak-guides-maven-plugin 22.0.0...

org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin 23.0.3...

org.keycloak:keycloak-guides (23.0.5), org.keycloak:keycloak-guides-maven-plugin (23.0.5) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (23.0.5)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.5 - org.keycloak:keycloak-guides-maven-plugin 23.0.5...

org.keycloak:keycloak-guides (24.0.0), org.keycloak:keycloak-guides-maven-plugin (24.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (24.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 24.0.0 - org.keycloak:keycloak-guides-maven-plugin 24.0.0...

org.keycloak:keycloak-guides (18.0.2), org.keycloak:keycloak-guides-maven-plugin (18.0.2) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (18.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 18.0.2 - org.keycloak:keycloak-guides-maven-plugin 18.0.2...

org.keycloak:keycloak-guides (19.0.0), org.keycloak:keycloak-guides-maven-plugin (19.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (19.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.0 - org.keycloak:keycloak-guides-maven-plugin 19.0.0...

org.keycloak:keycloak-guides (20.0.0), org.keycloak:keycloak-guides-maven-plugin (20.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (20.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 20.0.0 - org.keycloak:keycloak-guides-maven-plugin 20.0.0...

org.keycloak:keycloak-guides (16.0.0), org.keycloak:keycloak-guides-maven-plugin (16.0.0) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (16.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 16.0.0 - org.keycloak:keycloak-guides-maven-plugin 16.0.0...

org.keycloak:keycloak-guides (16.1.1), org.keycloak:keycloak-guides-maven-plugin (16.1.1) +3 more potentially affected by CVE-2025-10939 via org.keycloak:keycloak-quarkus-server (16.1.1)

org.keycloak:keycloak-quarkus-server MAVEN version 16.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 16.1.1 - org.keycloak:keycloak-guides-maven-plugin 16.1.1...

com.cyclonedx:cyclonedx-gradle-plugin (>=1.1.2, <=1.5.0), com.free-now.sauron.plugins:dependency-checker (>=0.0.57, <=0.0.74) +102 more potentially affected by CVE-2025-64518 via org.cyclonedx:cyclonedx-core-java (>=2.1.1, <=11.0.0)

org.cyclonedx:cyclonedx-core-java MAVEN version =2.1.1, =1.1.2, =0.0.57, =1.0.0, =0.4.0, =1.0.0, =1.0.0, =0.9.0, =0.120.0, =0.9.0, =0.105.0, =0.157.0, =0.157.0, =0.137.0, =0.115.0, =0.9.0, =0.125.0 and more Source cves: CVE-2025-64518 Source advisor...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value due to the protocDigest parameter being ignored when the protoc executable is sourced from the system PATH. An attacker can bypass integrity verification by placing a malicious protoc binary...

Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH

Summary The expected protocDigest is ignored when protoc is taken from the PATH. Details The documentation for the protocDigest parameter says: ... Users may wish to specify this if using a PATH-based binary ... However, when specifying PATH the protocDigest is not actually checked because the co...

GHSA-J2PC-V64R-MV4F Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH

Summary The expected protocDigest is ignored when protoc is taken from the PATH. Details The documentation for the protocDigest parameter says: ... Users may wish to specify this if using a PATH-based binary ... However, when specifying PATH the protocDigest is not actually checked because the co...