ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +417 more potentially affected by CVE-2026-18571 via org.keycloak:keycloak-server-spi-private (>=2.4.0.cr1, <=26.7.2)

org.keycloak:keycloak-server-spi-private MAVEN version =2.4.0.cr1, =0.1.0, =0.11.0, =0.10.4, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.0.28 and more Source cves: CVE-2026-18571 Source advisory: SNYK:JAVA-ORGKEYCLOAK-19006554...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +416 more potentially affected by CVE-2026-16105 via org.keycloak:keycloak-server-spi-private (>=2.4.0.cr1, <=26.7.0)

org.keycloak:keycloak-server-spi-private MAVEN version =2.4.0.cr1, =0.1.0, =0.11.0, =0.10.4, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.0.28 and more Source cves: CVE-2026-16105 Source advisory: SNYK:JAVA-ORGKEYCLOAK-18752071...

org.keycloak:keycloak-authz-policy-drools (6.0.0), org.keycloak:keycloak-dependencies-server-all (6.0.0) +8 more potentially affected by CVE-2026-2092 via org.keycloak:keycloak-services (6.0.0)

org.keycloak:keycloak-services MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 6.0.0 - org.keycloak:keycloak-dependencies-server-all 6.0...

org.keycloak:keycloak-account-freemarker (1.0.3.final), org.keycloak:keycloak-dependencies-server-all (1.0.3.final) +3 more potentially affected by CVE-2026-9795 via org.keycloak:keycloak-services (1.0.3.final)

org.keycloak:keycloak-services MAVEN version 1.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.3.final -...

org.keycloak:keycloak-account-freemarker (1.0.1.final), org.keycloak:keycloak-dependencies-server-all (1.0.1.final) +3 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (1.0.1.final)

org.keycloak:keycloak-services MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.1.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.keycloak:keycloak-account-freemarker (1.0.5.final) +4 more potentially affected by CVE-2026-9803 via org.keycloak:keycloak-services (1.0.5.final)

org.keycloak:keycloak-services MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...

org.keycloak:keycloak-authz-policy-drools (3.3.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.3.0.cr1) +6 more potentially affected by CVE-2026-9802 via org.keycloak:keycloak-services (3.3.0.cr1)

org.keycloak:keycloak-services MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.cr1 -...

org.keycloak:keycloak-authz-policy-drools (6.0.0), org.keycloak:keycloak-dependencies-server-all (6.0.0) +8 more potentially affected by CVE-2026-9793 via org.keycloak:keycloak-services (6.0.0)

org.keycloak:keycloak-services MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 6.0.0 - org.keycloak:keycloak-dependencies-server-all 6.0...

de.adorsys.sts:keycloak-storage-provider (0.29.0), dk.grinn.keycloak:keycloak-migrate-resource (0.0.5) +17 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (5.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.sts:keycloak-storage-provider 0.29.0 -...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11) +17 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (6.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =0.0.6, =0.0.6, =1.0.6,...

org.keycloak:keycloak-authz-policy-common (8.0.0), org.keycloak:keycloak-authz-policy-drools (8.0.0) +14 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (8.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 8.0.0 -...

com.github.vzakharchenko:keycloak-plugins (>=0.1, <=1.0.1), com.github.vzakharchenko:mikrotik-radius-plugin (>=0.1, <=1.0.1) +22 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (8.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:keycloak-plugins =0.1, =0.1, =0.1, =0.1, =2.0.4, =2.0....

com.backpackcloud:keycloak-http-forwarder (0.1.0), com.github.vzakharchenko:keycloak-plugins (1.2.3) +22 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (9.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.backpackcloud:keycloak-http-forwarder 0.1.0 -...

com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +22 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (10.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 -...

city.smartb.i2:keycloak-plugin-client (>=0.11.0, <=0.13.0), city.smartb.i2:keycloak-plugin-domain (>=0.11.0, <=0.13.0) +41 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (18.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - city.smartb.i2:keycloak-plugin-client =0.11.0, =0.11.0, =0.0.1, =0.3.0 -...

com.charlyghislain.keycloak:keycloak-importexport (19.0.0), com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.7, <=1.4.8) +41 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (19.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 19.0.0 -...

com.markstickel.keycloak:keycloak-kafka-publisher-event-listener-provider (1.0.0), io.github.pckhoi.keycloak:webhook (19.0.2.1) +30 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (19.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.markstickel.keycloak:keycloak-kafka-publisher-event-listener-provider 1.0....

fr.cnieg.keycloak:attribute-login-provider (>=1.3.0, <=1.3.1), io.teragroup.keycloak.extension:migration (>=19.0.3.1, <=19.0.3.2) +36 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (19.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.0, =19.0.3.1, =1.11, =1.11,...

com.abavilla:fpi-framework-core (>=1.6.2, <=1.6.4), com.abavilla:fpi-framework-pom (>=1.6.2, <=1.6.4) +88 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (20.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-framework-core =1.6.2, =1.6.2, =0.4.7-20.0.3, =0.4.7-20.0.3,...

com.abavilla:fpi-bot-api (>=1.5.1, <=1.5.4), com.abavilla:fpi-bot-api-parent (>=1.5.1, <=1.5.4) +103 more potentially affected by CVE-2026-9791 via org.keycloak:keycloak-server-spi-private (21.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-bot-api =1.5.1, =1.5.1, =1.7.0, =1.7.0, =1.5.2, =1.5.2, =1.7....