io.quarkus:quarkus-keycloak-authorization-deployment (>=3.21.0.cr1, <=3.27.4), org.jboss.pnc:repository-driver (>=3.2.0, <=3.3.0) potentially affected by CVE-2026-50559 via io.quarkus:quarkus-keycloak-authorization (>=3.21.0.cr1, <=3.27.4)

io.quarkus:quarkus-keycloak-authorization MAVEN version =3.21.0.cr1, =3.21.0.cr1, =3.2.0, =3.3.0 Source cves: CVE-2026-50559 Source advisory: SNYK:JAVA-IOQUARKUS-17375077...

Path Equivalence

Overview Affected versions of this package are vulnerable to Path Equivalence in the pathWithoutMatrixParams of AbstractPathMatchingHttpSecurityPolicy via specially crafted HTTP requests containing encoded semicolons, slashes, or backslashes in the request path. An attacker can gain unauthorized...

com.abavilla:fpi-bot-api (>=1.6.0, <=1.8.5), com.abavilla:fpi-bot-api-parent (>=1.6.0, <=1.8.5) +19 more potentially affected by CVE-2026-50559 via io.quarkus:quarkus-keycloak-authorization (>=3.0.0.alpha1, <=3.20.6.1)

io.quarkus:quarkus-keycloak-authorization MAVEN version =3.0.0.alpha1, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.0.25, =1.0.25, =1.5.0, =1.5.0, =1.3.1, =1.3.1, =1.3.4, =1.3.13 and more Source cves: CVE-2026-50559 Source advisory: SNYK:JAVA-IOQUARKUS-17375077...

io.quarkus:quarkus-keycloak-authorization-deployment (3.37.0.cr1) potentially affected by CVE-2026-50559 via io.quarkus:quarkus-keycloak-authorization (3.37.0.cr1)

io.quarkus:quarkus-keycloak-authorization MAVEN version 3.37.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 3.37.0.cr1 Source...

ai.wanaku:wanaku-router-backend (0.2.0), io.quarkus:quarkus-keycloak-authorization-deployment (>=3.28.0.cr1, <=3.33.2) potentially affected by CVE-2026-50559 via io.quarkus:quarkus-keycloak-authorization (>=3.28.0.cr1, <=3.33.2)

io.quarkus:quarkus-keycloak-authorization MAVEN version =3.28.0.cr1, =3.28.0.cr1, =3.33.2 Source cves: CVE-2026-50559 Source advisory: SNYK:JAVA-IOQUARKUS-17375077...

io.quarkus:quarkus-keycloak-authorization-deployment (>=3.34.0.cr1, <=3.36.2) potentially affected by CVE-2026-50559 via io.quarkus:quarkus-keycloak-authorization (>=3.34.0.cr1, <=3.36.2)

io.quarkus:quarkus-keycloak-authorization MAVEN version =3.34.0.cr1, =3.34.0.cr1, =3.36.2 Source cves: CVE-2026-50559 Source advisory: SNYK:JAVA-IOQUARKUS-17375077...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization when handling HTTP request paths that have had normalizedPath applied. An attacker can gain unauthorized access to protected resources by appending a semicolon and arbitrary text to the request URL, exploiting...

io.quarkus:quarkus-keycloak-authorization-deployment (>=3.35.0.cr1, <=3.35.0) potentially affected by CVE-2026-39852 via io.quarkus:quarkus-keycloak-authorization (>=3.35.0.cr1, <=3.35.0)

io.quarkus:quarkus-keycloak-authorization MAVEN version =3.35.0.cr1, =3.35.0.cr1, =3.35.0 Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420251...

io.quarkus:quarkus-keycloak-authorization-deployment (>=3.21.0, <=3.27.3), org.jboss.pnc:repository-driver (>=3.2.0, <=3.3.0) potentially affected by CVE-2026-39852 via io.quarkus:quarkus-keycloak-authorization (>=3.21.0, <=3.27.3)

io.quarkus:quarkus-keycloak-authorization MAVEN version =3.21.0, =3.21.0, =3.2.0, =3.3.0 Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420251...

io.quarkus:quarkus-keycloak-authorization-deployment (>=3.34.0.cr1, <=3.34.6) potentially affected by CVE-2026-39852 via io.quarkus:quarkus-keycloak-authorization (>=3.34.0.cr1, <=3.34.6)

io.quarkus:quarkus-keycloak-authorization MAVEN version =3.34.0.cr1, =3.34.0.cr1, =3.34.6 Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420251...

io.quarkus:quarkus-keycloak-authorization (>=3.35.0.cr1, <=3.35.0), io.quarkus:quarkus-keycloak-authorization-deployment (>=3.35.0.cr1, <=3.35.0) +7 more potentially affected by CVE-2026-39852 via io.quarkus:quarkus-oidc (>=3.35.0.cr1, <=3.35.0)

io.quarkus:quarkus-oidc MAVEN version =3.35.0.cr1, =3.35.0.cr1, =3.35.0.cr1, =3.35.0.cr1, =3.35.0.cr1, =3.35.0.cr1, =3.35.0.cr1, =3.35.0.cr1, =3.35.0.cr1, =3.35.0.cr1, =3.35.0 Source cves: CVE-2026-39852 Source advisory: SNYK:JAVA-IOQUARKUS-16420252...

io.quarkus:quarkus-keycloak-authorization-deployment (1.11.2.final) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (1.11.2.final)

io.quarkus:quarkus-keycloak-authorization MAVEN version 1.11.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 1.11.2.final Sour...

io.quarkus:quarkus-keycloak-authorization-deployment (1.12.1.final) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (1.12.1.final)

io.quarkus:quarkus-keycloak-authorization MAVEN version 1.12.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 1.12.1.final Sour...

io.quarkus:quarkus-keycloak-authorization-deployment (1.5.2.final) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (1.5.2.final)

io.quarkus:quarkus-keycloak-authorization MAVEN version 1.5.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 1.5.2.final Source...

io.quarkus:quarkus-keycloak-authorization-deployment (1.4.2.final) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (1.4.2.final)

io.quarkus:quarkus-keycloak-authorization MAVEN version 1.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 1.4.2.final Source...

io.quarkus:quarkus-keycloak-authorization-deployment (1.3.0.alpha1) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (1.3.0.alpha1)

io.quarkus:quarkus-keycloak-authorization MAVEN version 1.3.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 1.3.0.alpha1 Sour...

io.quarkus:quarkus-keycloak-authorization-deployment (1.4.1.final) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (1.4.1.final)

io.quarkus:quarkus-keycloak-authorization MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 1.4.1.final Source...

io.quarkus:quarkus-keycloak-authorization-deployment (1.0.0.final) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (1.0.0.final)

io.quarkus:quarkus-keycloak-authorization MAVEN version 1.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 1.0.0.final Source...

io.quarkus:quarkus-keycloak-authorization-deployment (1.1.0.cr1) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (1.1.0.cr1)

io.quarkus:quarkus-keycloak-authorization MAVEN version 1.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 1.1.0.cr1 Source cve...

io.quarkus:quarkus-keycloak-authorization-deployment (0.28.0) potentially affected by CVE-2023-4853 via io.quarkus:quarkus-keycloak-authorization (0.28.0)

io.quarkus:quarkus-keycloak-authorization MAVEN version 0.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-keycloak-authorization and may be impacted: - io.quarkus:quarkus-keycloak-authorization-deployment 0.28.0 Source cves:...