Search for packages
purl | pkg:maven/org.keycloak/keycloak-services@26.2.2 |
Vulnerability | Summary | Fixed by |
---|---|---|
This package is not known to be affected by vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-1azf-tnm3-pyh3 | Duplicate Advisory: Keycloak vulnerable to two factor authentication bypass |
GHSA-fx44-2wx5-5fvp
|
VCID-5hrf-cqc3-b7am | Duplicate Advisory: Keycloak hostname verification |
GHSA-r934-w73g-v4p8
|
VCID-w71m-tyt8-dqby | A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended. |
CVE-2025-3501
GHSA-hw58-3793-42gg |
VCID-ze83-qhsk-67bh | A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication. |
CVE-2025-3910
GHSA-5jfq-x6xp-7rw2 |