Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-model-infinispan@8.0.2
purl pkg:maven/org.keycloak/keycloak-model-infinispan@8.0.2
Next non-vulnerable version 23.0.0
Latest non-vulnerable version 23.0.0
Risk score 3.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-2vp8-jv5v-6qh6
Aliases:
CVE-2021-3637
Allocation of resources without limits or throttling in keycloak-model-infinispan A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 …
14.0.0
Vulnerable
CVE-2023-6291

URL Redirection to Untrusted Site ('Open Redirect') A flaw was found in the redirect_uri validation logic in Keycloak. This issue …
23.0.0
Not vulnerable
CVE-2022-3916

Insufficient Session Expiration A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared …
20.0.2
Vulnerable
This package is not known to fix any advisories.