litellm vulnerable to remote code execution based on using eval unsafely

BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the adddeployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ. An attacker can exploit this by sendin...

org.keycloak:keycloak-dependencies-server-all (24.0.3), org.keycloak:keycloak-guides (24.0.3) +6 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (24.0.3)

org.keycloak:keycloak-ldap-federation MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.3 - org.keycloak:keycloak-guides...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-guides (25.0.5) +6 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (25.0.5)

org.keycloak:keycloak-ldap-federation MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 - org.keycloak:keycloak-guides...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.1) +7 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (25.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =3.0.1-25.0, =4.0.1-25.0 -...

org.keycloak:keycloak-dependencies-server-all (24.0.3), org.keycloak:keycloak-guides (24.0.3) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (24.0.3)

org.keycloak:keycloak-model-storage-services MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.3 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.1) +6 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.1)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =3.0.1-25.0,...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.4) +6 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.4)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 4.0.2-25.0 -...

org.keycloak:keycloak-dependencies-server-all (25.0.5), org.keycloak:keycloak-guides (25.0.5) +5 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 25.0.5 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.0.3-25.0, <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.6) +6 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (25.0.6)

org.keycloak:keycloak-model-storage-services MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =4.0.3-25.0,...

org.keycloak:keycloak-dependencies-server-all (26.0.0), org.keycloak:keycloak-guides (26.0.0) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.0 -...

org.keycloak:keycloak-dependencies-server-all (26.0.4), org.keycloak:keycloak-guides (26.0.4) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.4 -...

org.keycloak:keycloak-dependencies-server-all (26.0.5), org.keycloak:keycloak-guides (26.0.5) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.5)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.5 -...

org.keycloak:keycloak-dependencies-server-all (26.0.8), org.keycloak:keycloak-guides (26.0.8) +7 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.0.8)

org.keycloak:keycloak-model-storage-services MAVEN version 26.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 26.0.8 -...

org.keycloak.testframework:keycloak-test-framework-core (26.1.0), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.1.0) +17 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.1.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.1.0 -...

org.keycloak.testframework:keycloak-test-framework-core (26.1.4), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.1.4) +17 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.1.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.1.4 -...

org.keycloak.testframework:keycloak-test-framework-core (26.2.0), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.0) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.0 -...

org.keycloak.testframework:keycloak-test-framework-core (26.2.1), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.1) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.1)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.1 -...

org.keycloak.testframework:keycloak-test-framework-core (26.2.3), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.3) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.3 -...

org.keycloak.testframework:keycloak-test-framework-core (26.2.4), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.4) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.4 -...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.3) +21 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=26.3.0, <=26.3.3)

org.keycloak:keycloak-model-storage-services MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-...