io.phasetwo.keycloak:keycloak-orgs (>=0.53, <=0.57), org.keycloak:keycloak-dependencies-server-all (23.0.6) +7 more potentially affected by CVE-2025-13467 via org.keycloak:keycloak-ldap-federation (23.0.6)

org.keycloak:keycloak-ldap-federation MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.53, =0.57 -...

CVE-2025-65780

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Authenticated users can update their entire user document beyond profile fields, including orgs/teams and loginDisabled, due to missing server-side authorization checks; this enables privileg...

EUVD-2011-4481

Malware in sbrugna...

EUVD-2011-4596

Malware in sbrugna...

EUVD-2011-4595

Malware in sbrugna...

EUVD-2011-4479

Malware in sbrugna...

EUVD-2011-4478

Malware in sbrugna...

de.adorsys.sts:keycloak-storage-provider (>=1.1.23, <=1.1.28), io.phasetwo.keycloak:keycloak-events (0.20) +17 more potentially affected by CVE-2025-8419 via org.keycloak:keycloak-services (22.0.4)

org.keycloak:keycloak-services MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =1.1.23, =0.20, =0.12, =0.14 -...

Malicious code in @zalastax/nolb-_dsr-rollback-org-s (npm)

The package @zalastax/nolb-dsr-rollback-org-s was found to contain malicious code...

com.charlyghislain.keycloak:keycloak-importexport (23.0.1), fr.cnieg.keycloak:attribute-login-provider (1.3.13) +26 more potentially affected by CVE-2025-7365 via org.keycloak:keycloak-services (23.0.3)

org.keycloak:keycloak-services MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 23.0.1 -...

io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-magic-link (>=0.16, <=0.19) +18 more potentially affected by CVE-2025-7365 via org.keycloak:keycloak-services (22.0.0)

org.keycloak:keycloak-services MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.16, =0.37, =0.9, =1.6, =2.1 -...

CVE-2011-4677

One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

CVE-2011-4555

One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a denial of service login disruption or spoof votes or comments by selecting a conflicting e-mail address...

CVE-2011-4554

One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via 1 " double quote and newline characters in an org name or 2 " double quote characters in an e-mail address, related to a "2nd Order SMTP Injection" issue...

CVE-2011-4553

Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow 1 remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the returnto parameter, and allow 2 remote authenticated users to redirect users to arbitrary web sites and conduct phishing...

CVE-2011-4678

The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts depending on whether the e-mail address is registered, which allows remote attackers to enumerate user accounts via a series of requests...

com.charlyghislain.keycloak:keycloak-importexport (23.0.1), fr.cnieg.keycloak:attribute-login-provider (1.3.13) +26 more potentially affected by CVE-2025-3910 via org.keycloak:keycloak-services (23.0.3)

org.keycloak:keycloak-services MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 23.0.1 -...

io.phasetwo.keycloak:keycloak-orgs (>=0.44, <=0.46), org.keycloak:keycloak-dependencies-server-all (22.0.5) +6 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (22.0.5)

org.keycloak:keycloak-ldap-federation MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.44, =0.46 -...

io.phasetwo.keycloak:keycloak-orgs (>=0.53, <=0.57), org.keycloak:keycloak-dependencies-server-all (23.0.6) +7 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (23.0.6)

org.keycloak:keycloak-ldap-federation MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.53, =0.57 -...

io.phasetwo.keycloak:keycloak-orgs (>=0.37, <=0.39), org.keycloak:keycloak-dependencies-server-all (22.0.0) +7 more potentially affected by CVE-2025-0604 via org.keycloak:keycloak-ldap-federation (22.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - io.phasetwo.keycloak:keycloak-orgs =0.37, =0.39 -...