org.apache.james:james-server-app (>=3.2.0, <=3.5.0), org.apache.james:james-server-spring (>=3.2.0, <=3.5.0) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.18.release)

org.springframework:spring-jms MAVEN version 3.2.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.james:james-server-app =3.2.0, =3.2.0, =3.5.0 Source cves: CVE-2026-41855 Sourc...

CVE-2026-5630 assafelovic gpt-researcher Report API app.py cross site scripting

A flaw has been found in assafelovic gpt-researcher up to 3.4.3. The impacted element is an unknown function of the file backend/server/app.py of the component Report API. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been...

net.optionfactory.keycloak:optionfactory-keycloak-provisioning-api (2.0), org.keycloak:keycloak-dependencies-server-all (20.0.0) +6 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (20.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-provisioning-api 2.0 -...

io.phasetwo.keycloak:keycloak-events (>=0.18, <=0.19), io.phasetwo.keycloak:keycloak-orgs (>=0.37, <=0.39) +7 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-model-jpa (22.0.0)

org.keycloak:keycloak-model-jpa MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-jpa and may be impacted: - io.phasetwo.keycloak:keycloak-events =0.18, =0.37, =0.39 -...

Insertion of Sensitive Information Into Sent Data

Overview github.com/mattermost/mattermost-server/app is an open source Slack-alternative in Golang and React. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the WebSocket post deletion event. An attacker can access unrevealed message...

Malicious code in ui5-cap-event-app-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837e841e2b75385a4e7c030237983cfe52f91373ffa3e56859c7055ac0a80f4d The package ui5-cap-event-app-server was found to contain malicious code. Source: ossf-package-analysis...

org.keycloak:keycloak-quarkus-server-app (12.0.4), org.keycloak:keycloak-quarkus-server-deployment (12.0.4) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (12.0.4)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.4 -...

org.keycloak:keycloak-guides (19.0.1), org.keycloak:keycloak-guides-maven-plugin (19.0.1) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (19.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 19.0.1 - org.keycloak:keycloak-guides-maven-plugin 19.0.1...

org.keycloak:keycloak-quarkus-server-app (13.0.0), org.keycloak:keycloak-quarkus-server-deployment (13.0.0) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (13.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.0 -...

org.keycloak:keycloak-quarkus-server-app (15.0.2), org.keycloak:keycloak-quarkus-server-deployment (15.0.2) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (15.0.2)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.2 -...

io.kokuwa.keycloak:keycloak-event-metrics (0.2.1), org.keycloak:keycloak-guides (21.1.0) +4 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (21.1.0)

org.keycloak:keycloak-quarkus-server MAVEN version 21.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics 0.2.1 - org.keycloak:keycloak-guides 21.1.0 ...

org.keycloak:keycloak-guides (23.0.0), org.keycloak:keycloak-guides-maven-plugin (23.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.0 - org.keycloak:keycloak-guides-maven-plugin 23.0.0...

org.keycloak:keycloak-guides (23.0.3), org.keycloak:keycloak-guides-maven-plugin (23.0.3) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.3 - org.keycloak:keycloak-guides-maven-plugin 23.0.3...

org.keycloak:keycloak-quarkus-server-app (15.0.0), org.keycloak:keycloak-quarkus-server-deployment (15.0.0) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (15.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 15.0.0 -...

org.keycloak:keycloak-quarkus-server-app (12.0.0), org.keycloak:keycloak-quarkus-server-deployment (12.0.0) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (12.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.0 -...

org.keycloak:keycloak-quarkus-server-app (13.0.1), org.keycloak:keycloak-quarkus-server-deployment (13.0.1) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (13.0.1)

org.keycloak:keycloak-quarkus-server MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 13.0.1 -...

org.keycloak:keycloak-quarkus-server-app (12.0.3), org.keycloak:keycloak-quarkus-server-deployment (12.0.3) potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (12.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-quarkus-server-app 12.0.3 -...

org.keycloak:keycloak-guides (23.0.6), org.keycloak:keycloak-guides-maven-plugin (23.0.6) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (23.0.6)

org.keycloak:keycloak-quarkus-server MAVEN version 23.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 23.0.6 - org.keycloak:keycloak-guides-maven-plugin 23.0.6...

org.keycloak:keycloak-guides (25.0.3), org.keycloak:keycloak-guides-maven-plugin (25.0.3) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (25.0.3)

org.keycloak:keycloak-quarkus-server MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 25.0.3 - org.keycloak:keycloak-guides-maven-plugin 25.0.3...

org.keycloak:keycloak-guides (22.0.0), org.keycloak:keycloak-guides-maven-plugin (22.0.0) +3 more potentially affected by CVE-2025-11537 via org.keycloak:keycloak-quarkus-server (22.0.0)

org.keycloak:keycloak-quarkus-server MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-quarkus-server and may be impacted: - org.keycloak:keycloak-guides 22.0.0 - org.keycloak:keycloak-guides-maven-plugin 22.0.0...