Search for packages
Package details: pkg:maven/org.keycloak/keycloak-parent@20.0.0
purl pkg:maven/org.keycloak/keycloak-parent@20.0.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-1m3m-ay28-aaag
Aliases:
CVE-2019-14910
GHSA-jf86-9434-f8c2
Improper Authentication A vulnerability was found in keycloak, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered. There are no reported fixed by versions.
VCID-6367-jty3-aaak
Aliases:
CVE-2022-3782
GHSA-g8q8-fggx-9r3q
GMS-2022-8407
Keycloak vulnerable to path traversal via double URL encoding
20.0.1
Affected by 5 other vulnerabilities.
20.0.2
Affected by 4 other vulnerabilities.
VCID-7qnt-1wwt-aaap
Aliases:
CVE-2022-3916
GHSA-97g8-xfvw-q4hg
GMS-2022-8406
Keycloak vulnerable to session takeover with OIDC offline refreshtokens
20.0.2
Affected by 4 other vulnerabilities.
VCID-dgpm-z9v1-aaak
Aliases:
CVE-2023-6927
GHSA-3p75-q5cc-qmj7
A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "form_post.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134.
23.0.4
Affected by 1 other vulnerability.
VCID-kfzc-yxas-aaad
Aliases:
CVE-2023-6291
GHSA-mpwq-j3xf-7m5w
The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted
23.0.0
Affected by 2 other vulnerabilities.
VCID-sjz1-u3j6-aaas
Aliases:
CVE-2022-4137
GHSA-9hhc-pj4w-w5rv
GMS-2023-616
Keycloak Cross-site Scripting on OpenID connect login service
20.0.5
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:51:38.380962+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 36.1.3
2025-06-20T16:50:11.797344+00:00 GitLab Importer Affected by VCID-dgpm-z9v1-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GHSA-3p75-q5cc-qmj7.yml 36.1.3
2025-06-20T16:43:23.876270+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 36.1.3
2025-06-20T16:43:23.363012+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap None 36.1.3
2025-06-20T16:23:30.664152+00:00 GitLab Importer Affected by VCID-sjz1-u3j6-aaas None 36.1.3
2025-06-20T16:17:03.388512+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 36.1.3
2025-06-20T16:16:50.225233+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak None 36.1.3
2025-06-20T15:52:02.870463+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag None 36.1.3
2025-06-20T15:48:13.975074+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 36.1.3
2025-06-03T23:28:58.046173+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 36.1.0
2025-06-03T23:27:41.121670+00:00 GitLab Importer Affected by VCID-dgpm-z9v1-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GHSA-3p75-q5cc-qmj7.yml 36.1.0
2025-06-03T23:21:42.051599+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 36.1.0
2025-06-03T23:21:41.638028+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap None 36.1.0
2025-06-03T23:03:02.580764+00:00 GitLab Importer Affected by VCID-sjz1-u3j6-aaas None 36.1.0
2025-06-03T22:56:44.000431+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 36.1.0
2025-06-03T22:56:32.114772+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak None 36.1.0
2025-06-03T22:32:56.900353+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag None 36.1.0
2025-06-03T22:29:16.054292+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 36.1.0
2025-06-02T23:26:37.500880+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 36.1.2
2025-06-02T23:25:17.035430+00:00 GitLab Importer Affected by VCID-dgpm-z9v1-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GHSA-3p75-q5cc-qmj7.yml 36.1.2
2025-06-02T23:18:55.738932+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 36.1.2
2025-06-02T23:18:55.287618+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap None 36.1.2
2025-06-02T22:59:34.359859+00:00 GitLab Importer Affected by VCID-sjz1-u3j6-aaas None 36.1.2
2025-06-02T22:52:58.699158+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 36.1.2
2025-06-02T22:52:45.871849+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak None 36.1.2
2025-06-02T22:21:34.270519+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag None 36.1.2
2025-06-02T22:17:40.469738+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 36.1.2
2025-04-03T21:52:38.134492+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 36.0.0
2025-04-03T21:49:49.356603+00:00 GitLab Importer Affected by VCID-dgpm-z9v1-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GHSA-3p75-q5cc-qmj7.yml 36.0.0
2025-04-03T21:36:09.519492+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 36.0.0
2025-04-03T21:36:08.218523+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap None 36.0.0
2025-04-03T20:54:59.416169+00:00 GitLab Importer Affected by VCID-sjz1-u3j6-aaas None 36.0.0
2025-04-03T20:42:04.676059+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 36.0.0
2025-04-03T20:41:37.271133+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak None 36.0.0
2025-04-03T19:56:44.517166+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag None 36.0.0
2025-04-03T19:51:31.429246+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 36.0.0
2025-03-29T10:48:38.252462+00:00 GHSA Importer Affected by VCID-6367-jty3-aaak None 36.0.0
2025-02-18T08:10:39.861173+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 35.1.0
2025-02-18T08:10:39.038993+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak None 35.1.0
2025-02-18T08:09:44.640355+00:00 GitLab Importer Affected by VCID-sjz1-u3j6-aaas None 35.1.0
2025-02-18T07:59:27.938217+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 35.1.0
2025-02-18T07:59:27.110338+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap None 35.1.0
2025-02-18T06:41:23.737881+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 35.1.0
2025-02-18T06:41:23.207221+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag None 35.1.0
2025-02-18T01:07:44.615090+00:00 GitLab Importer Affected by VCID-dgpm-z9v1-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GHSA-3p75-q5cc-qmj7.yml 35.1.0
2025-02-18T01:06:42.215814+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 35.1.0
2024-11-21T03:20:16.057970+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 35.0.0
2024-11-21T03:18:49.289292+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 35.0.0
2024-11-21T02:37:25.591669+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 35.0.0
2024-11-20T23:31:19.790051+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 35.0.0
2024-11-19T03:09:50.149561+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 34.3.2
2024-11-19T03:08:27.405122+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 34.3.2
2024-11-19T02:27:33.476403+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 34.3.2
2024-11-18T23:20:29.293996+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 34.3.2
2024-10-08T03:46:28.035355+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 34.0.2
2024-10-08T03:44:58.937600+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 34.0.2
2024-10-08T03:02:25.631222+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 34.0.2
2024-10-08T00:17:37.500401+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 34.0.2
2024-10-07T21:53:13.511337+00:00 GHSA Importer Affected by VCID-dgpm-z9v1-aaak https://github.com/advisories/GHSA-3p75-q5cc-qmj7 34.0.2
2024-10-07T20:53:55.392057+00:00 GHSA Importer Affected by VCID-sjz1-u3j6-aaas https://github.com/advisories/GHSA-9hhc-pj4w-w5rv 34.0.2
2024-10-07T20:51:16.457996+00:00 GHSA Importer Affected by VCID-6367-jty3-aaak https://github.com/advisories/GHSA-g8q8-fggx-9r3q 34.0.2
2024-09-23T03:38:39.366179+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 34.0.1
2024-09-23T02:52:17.115813+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 34.0.1
2024-09-23T00:31:34.995153+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 34.0.1
2024-09-22T22:22:28.735989+00:00 GHSA Importer Affected by VCID-dgpm-z9v1-aaak https://github.com/advisories/GHSA-3p75-q5cc-qmj7 34.0.1
2024-09-22T21:31:12.495045+00:00 GHSA Importer Affected by VCID-sjz1-u3j6-aaas https://github.com/advisories/GHSA-9hhc-pj4w-w5rv 34.0.1
2024-09-17T22:41:36.475248+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 34.0.1
2024-09-17T22:03:54.291776+00:00 GHSA Importer Affected by VCID-6367-jty3-aaak https://github.com/advisories/GHSA-g8q8-fggx-9r3q 34.0.1
2024-05-17T21:08:30.549693+00:00 GHSA Importer Affected by VCID-dgpm-z9v1-aaak https://github.com/advisories/GHSA-3p75-q5cc-qmj7 34.0.0rc4
2024-04-24T06:25:45.357739+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 34.0.0rc4
2024-04-24T06:25:44.536581+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak None 34.0.0rc4
2024-04-24T06:24:56.166216+00:00 GitLab Importer Affected by VCID-sjz1-u3j6-aaas None 34.0.0rc4
2024-04-24T06:19:12.128946+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 34.0.0rc4
2024-04-24T06:19:11.310462+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap None 34.0.0rc4
2024-04-24T05:31:11.652852+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 34.0.0rc4
2024-04-24T05:31:11.215147+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag None 34.0.0rc4
2024-04-24T02:42:39.325350+00:00 GitLab Importer Affected by VCID-kfzc-yxas-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2023-6291.yml 34.0.0rc4
2024-04-23T23:39:07.334229+00:00 GHSA Importer Affected by VCID-sjz1-u3j6-aaas https://github.com/advisories/GHSA-9hhc-pj4w-w5rv 34.0.0rc4
2024-04-23T23:39:05.750296+00:00 GHSA Importer Affected by VCID-sjz1-u3j6-aaas None 34.0.0rc4
2024-04-23T23:31:30.434178+00:00 GHSA Importer Affected by VCID-6367-jty3-aaak https://github.com/advisories/GHSA-g8q8-fggx-9r3q 34.0.0rc4
2024-04-23T23:31:27.549613+00:00 GHSA Importer Affected by VCID-6367-jty3-aaak None 34.0.0rc4
2024-04-23T19:34:52.434502+00:00 GHSA Importer Affected by VCID-1m3m-ay28-aaag None 34.0.0rc4
2024-01-10T08:54:06.850256+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 34.0.0rc2
2024-01-10T08:54:06.032473+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak None 34.0.0rc2
2024-01-10T08:53:19.279274+00:00 GitLab Importer Affected by VCID-sjz1-u3j6-aaas None 34.0.0rc2
2024-01-10T08:50:15.217955+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 34.0.0rc2
2024-01-10T08:50:14.400883+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap None 34.0.0rc2
2024-01-10T08:03:08.984610+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 34.0.0rc2
2024-01-10T08:03:08.607213+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag None 34.0.0rc2
2024-01-10T03:14:43.677282+00:00 GHSA Importer Affected by VCID-dgpm-z9v1-aaak https://github.com/advisories/GHSA-3p75-q5cc-qmj7 34.0.0rc2
2024-01-10T01:40:55.014781+00:00 GHSA Importer Affected by VCID-sjz1-u3j6-aaas https://github.com/advisories/GHSA-9hhc-pj4w-w5rv 34.0.0rc2
2024-01-10T01:40:53.399230+00:00 GHSA Importer Affected by VCID-sjz1-u3j6-aaas None 34.0.0rc2
2024-01-10T01:30:24.112364+00:00 GHSA Importer Affected by VCID-6367-jty3-aaak https://github.com/advisories/GHSA-g8q8-fggx-9r3q 34.0.0rc2
2024-01-10T01:30:20.721984+00:00 GHSA Importer Affected by VCID-6367-jty3-aaak None 34.0.0rc2
2024-01-09T21:27:45.699162+00:00 GHSA Importer Affected by VCID-1m3m-ay28-aaag None 34.0.0rc2
2024-01-04T01:39:24.712703+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak None 34.0.0rc1
2024-01-04T01:38:38.247947+00:00 GitLab Importer Affected by VCID-sjz1-u3j6-aaas None 34.0.0rc1
2024-01-04T01:35:33.391770+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8406.yml 34.0.0rc1
2024-01-04T01:35:32.597120+00:00 GitLab Importer Affected by VCID-7qnt-1wwt-aaap None 34.0.0rc1
2024-01-04T00:48:18.042362+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/CVE-2019-14910.yml 34.0.0rc1
2024-01-04T00:48:17.649956+00:00 GitLab Importer Affected by VCID-1m3m-ay28-aaag None 34.0.0rc1
2024-01-03T18:03:51.897797+00:00 GitLab Importer Affected by VCID-6367-jty3-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.keycloak/keycloak-parent/GMS-2022-8407.yml 34.0.0rc1
2024-01-03T17:38:39.417427+00:00 GHSA Importer Affected by VCID-6367-jty3-aaak https://github.com/advisories/GHSA-g8q8-fggx-9r3q 34.0.0rc1
2024-01-03T16:23:17.779857+00:00 GHSA Importer Affected by VCID-1m3m-ay28-aaag None 34.0.0rc1