Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-saml-adapter-core@4.4.0.Final
purl pkg:maven/org.keycloak/keycloak-saml-adapter-core@4.4.0.Final
Next non-vulnerable version 26.5.5
Latest non-vulnerable version 26.5.5
Risk score 3.5
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-wmxr-6j5f-838p
Aliases:
CVE-2026-2092
Duplicate Advisory: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions ### Duplicate Advisory This advisory has been withdrawn … There are no reported fixed by versions.
GHSA-xv6h-r36f-3gp5
Aliases:
CVE-2026-2575
Keycloak: Denial of Service due to excessive SAMLRequest decompression A flaw was found in Keycloak. An unauthenticated remote attacker can …
26.5.4
Vulnerable
26.5.4
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-xvv8-8wh9-9fh2
Keycloak Authentication Error It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could … CVE-2018-10894