1440979 matches found
ECHO-1EC0-58D1-CB3D Keycloak's GHSA advisory (GHSA-gv3v-2cpp-3pmq) lists the affected package/range as org.keycloak:keycloak-quarkus-server < 26.5.6 with no lower bound, so by version string alone 25.0.6 is nominally in range. The actual vulnerable mechanism is the HTTP access log feature (config.HttpAccessLogOptions, HttpAccessLogPropertyMappers) added by the fix commit's PR to mask Authorization/Cookie headers in a verbose access-log pattern. That feature does not exist in 25.0.6 at all — confirmed via a full source search (no HttpAccessLogOptions.java, HttpAccessLogPropertyMappers.java, or any http-access-log config option anywhere in quarkus/config-api or quarkus/runtime). There is no access-log-pattern mechanism in this version capable of the described header disclosure.
Bulletin has no description...
ECHO-7EDB-23C5-02EC
Bulletin has no description...
ECHO-FEA2-5EA1-2849
Bulletin has no description...
ECHO-F035-45D7-D0F3
Bulletin has no description...
ECHO-8C0B-1F50-633C
Bulletin has no description...
ECHO-0030-65EC-F55D
Bulletin has no description...
CVE-2026-82653
creationtimestamp| type| source ---|---|--- 2026-08-30 16:02:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mucrb67gkf27 2026-08-30 16:07:19+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mucrkndz762c 2026-08-30 16:10:07+00:00| seen|...
MINI-XP63-3C6H-36JQ
Bulletin has no description...
MINI-CRCV-35GV-72V4
Bulletin has no description...
MINI-M7HH-XCXF-848V
Bulletin has no description...
MINI-9MRF-5426-W22Q
Bulletin has no description...
MINI-9X39-5JR9-2F7M
Bulletin has no description...
MINI-WX3G-5FRX-5CM2
Bulletin has no description...
MINI-2CRR-VJX8-4X5G
Bulletin has no description...
MINI-9CVM-MCVC-QFC9
Bulletin has no description...
MINI-RXJ6-C2CQ-RJ9X
Bulletin has no description...
MINI-F8W9-8M7P-C72F
Bulletin has no description...
MINI-4X8F-QGFM-6CHJ
Bulletin has no description...