Search for packages
| purl | pkg:maven/org.keycloak/keycloak-model-infinispan@2.3.0.CR1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-2vp8-jv5v-6qh6
Aliases: CVE-2021-3637 |
Allocation of resources without limits or throttling in keycloak-model-infinispan A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 … |
Vulnerable |
|
GHSA-8prc-58j4-m55q
Aliases: CVE-2019-14832 |
Keycloak Unauthenticated Access A flaw was found in the Keycloak REST API before version 8.0.0, implemented in Keycloak before 7.0.1 … |
Vulnerable |
|
CVE-2023-6291
|
URL Redirection to Untrusted Site ('Open Redirect') A flaw was found in the redirect_uri validation logic in Keycloak. This issue … |
Not vulnerable |
|
CVE-2022-3916
|
Insufficient Session Expiration A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared … |
Vulnerable |