Search for packages
| purl | pkg:maven/org.keycloak/keycloak-core@25.0.4 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-q4xq-445g-g6ch
Aliases: CVE-2024-4028 |
Keycloak allows cross-site scripting (XSS) A vulnerability was found in Keycloak. This issue may allow a privileged attacker to use … | There are no reported fixed by versions. |
|
GHSA-93ww-43rr-79v3
Aliases: CVE-2024-10039 |
Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination A vulnerability was found in Keycloak. Deployments of Keycloak with a … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-xmmm-jw76-q7vg
|
Keycloaks's One Time Passcode (OTP) is valid longer than expiration timeSeverity A vulnerability was found in Keycloak. Expired OTP codes … |
CVE-2024-7318
|