Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-parent@7.0
purl pkg:maven/org.keycloak/keycloak-parent@7.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-b9np-xrb9-g3fd
Aliases:
CVE-2019-14909
GHSA-fv4q-wm8c-wjg4
Keycloak Authentication Error A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted.
8.0.0
Affected by 20 other vulnerabilities.
8.0
Affected by 0 other vulnerabilities.
VCID-umcf-t6w5-juha
Aliases:
CVE-2019-14910
GHSA-jf86-9434-f8c2
Keycloak Authentication Error A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-03T21:26:32.954112+00:00 GitLab Importer Affected by VCID-b9np-xrb9-g3fd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14909.yml 38.1.0
2026-04-03T21:26:20.987165+00:00 GitLab Importer Affected by VCID-umcf-t6w5-juha https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 38.1.0