Search for packages
| purl | pkg:maven/org.keycloak/keycloak-ldap-federation@2.3.0.Final |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-93vm-mqpw-8wh3
|
Duplicate Advisory: Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization ### Duplicate Advisory This advisory has been withdrawn … |
Vulnerable |
|
GHSA-4hx9-48xh-5mxr
Aliases: CVE-2025-13467 |
Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization A flaw was found in the Keycloak LDAP User Federation … | There are no reported fixed by versions. |
|
GHSA-2p82-5wwr-43cw
Aliases: CVE-2025-0604 |
Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak The issue arises because Keycloak does not perform … | There are no reported fixed by versions. |
|
GHSA-m3hp-8546-5qmr
|
Duplicate Advisory: Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak # Duplicate Advisory This advisory has … | There are no reported fixed by versions. |
|
GHSA-8hc5-rmgf-qx6p
Aliases: CVE-2022-2232 |
Keycloak vulnerable to LDAP Injection on UsernameForm Login A flaw was found in the Keycloak package. This flaw allows an … |
Vulnerable |
|
GHSA-f6r7-6w34-x2gp
Aliases: CVE-2026-9801 |
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input A flaw was found in Keycloak. A remote attacker with … |
Not vulnerable |
|
GHSA-c25h-c27q-5qpv
Aliases: CVE-2024-5967 |
Keycloak leaks configured LDAP bind credentials through the Keycloak admin console ### Impact The LDAP testing endpoint allows to change … | There are no reported fixed by versions. |