Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-ldap-federation@26.2.0
purl pkg:maven/org.keycloak/keycloak-ldap-federation@26.2.0
Next non-vulnerable version 26.6.3
Latest non-vulnerable version 26.6.3
Risk score 2.5
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-93vm-mqpw-8wh3

Duplicate Advisory: Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization ### Duplicate Advisory This advisory has been withdrawn …
26.4.6
Vulnerable
GHSA-4hx9-48xh-5mxr
Aliases:
CVE-2025-13467
Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization A flaw was found in the Keycloak LDAP User Federation … There are no reported fixed by versions.
GHSA-f6r7-6w34-x2gp
Aliases:
CVE-2026-9801
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input A flaw was found in Keycloak. A remote attacker with …
26.6.3
Not vulnerable
This package is not known to fix any advisories.