Keycloak Server-Side Request Forgery via OIDC token endpoint manipulation

A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery SSRF by manipulating the clientsessionhost parameter during refresh token requests. This occurs when a Keycloak client is configured to use the backchannel.logout.url with the application.session.host...

CVE-2026-4845

creationtimestamp| type| source ---|---|--- 2026-03-26 09:23:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxbry4jca2n...

CVE-2026-4860

creationtimestamp| type| source ---|---|--- 2026-03-26 09:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxbdab5jt2i...

CVE-2026-4247

creationtimestamp| type| source ---|---|--- 2026-03-26 09:08:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxaxo55sy2t 2026-03-27 00:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhystcceec2r 2026-03-27 00:01:30+00:00| seen|...

CVE-2026-1890

creationtimestamp| type| source ---|---|--- 2026-03-26 09:06:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxaucihd522 2026-07-02 15:00:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1890.yaml 2026-07-03...

CVE-2026-4874

A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery SSRF by manipulating the clientsessionhost parameter during refresh token requests. This occurs when a Keycloak client is configured to use the backchannel.logout.url with the application.session.host...

CVE-2026-4836

creationtimestamp| type| source ---|---|--- 2026-03-26 06:23:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwxpoty5j23...

CVE-2026-4335

creationtimestamp| type| source ---|---|--- 2026-03-26 06:06:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwwqyknpp2d...

CVE-2025-15101

creationtimestamp| type| source ---|---|--- 2026-03-26 04:45:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwsa6yobn2o 2026-04-02 10:15:32+00:00| published-proof-of-concept| https://t.me/codebysec/9938...

CVE-2026-4331

creationtimestamp| type| source ---|---|--- 2026-03-26 04:16:40+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4331 2026-03-26 06:03:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwwmj3lts2t...

CVE-2026-4278

creationtimestamp| type| source ---|---|--- 2026-03-26 04:16:39+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4278 2026-03-26 06:08:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwwvxa74w24...

CVE-2026-4826

creationtimestamp| type| source ---|---|--- 2026-03-26 03:31:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwo5hmd7j25...

CVE-2026-33183

creationtimestamp| type| source ---|---|--- 2026-03-26 03:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwmrt3deo2g...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the URL construction process. An attacker can cause requests, including authentication headers, cookies, or tokens, to be sent to an attacker-controlled host by supplying a crafted absolute URL as th...

golang: net/url: Memory exhaustion in query parameter parsing in net/url

A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...

CVE-2026-33416

creationtimestamp| type| source ---|---|--- 2026-03-26 01:00:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mhwfpdaa5w2s 2026-03-26 16:00:58+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116296309675649424 2026-03-26 22:22:45+00:00| seen|...

CVE-2026-4823

creationtimestamp| type| source ---|---|--- 2026-03-26 00:59:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwfmqpecr2d...

golang: net/url: Memory exhaustion in query parameter parsing in net/url

A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted...

CVE-2026-33182 Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL

Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, when building the request URL, Saloon combined the connector's base URL with the request endpoint. If the endpoint was a valid absolute URL, the code used that URL as-is and ignored the base...

CVE-2026-33182 Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL

Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, when building the request URL, Saloon combined the connector's base URL with the request endpoint. If the endpoint was a valid absolute URL, the code used that URL as-is and ignored the base...