Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-core@9.0.1
purl pkg:maven/org.keycloak/keycloak-core@9.0.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.1
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-9695-w6h2-jpv9
Aliases:
CVE-2020-10686
Keycloak users may be able to remove MFA from other users' devices A community-only flaw was found where a malicious …
9.0.2
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-4gf2-xv97-63m2
Exposure of Sensitive Information in keycloak A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP … CVE-2020-1744