Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-model-jpa@21.0.0
purl pkg:maven/org.keycloak/keycloak-model-jpa@21.0.0
Next non-vulnerable version 26.5.6
Latest non-vulnerable version 26.5.6
Risk score 1.9
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-q35r-vvhv-vx5h
Aliases:
CVE-2026-3190
Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure A flaw was found in Keycloak. …
26.5.6
Not vulnerable
CVE-2023-6291

URL Redirection to Untrusted Site ('Open Redirect') A flaw was found in the redirect_uri validation logic in Keycloak. This issue …
23.0.0
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-54f3-c6hg-865h
Allocation of Resources Without Limits in Keycloak An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered … CVE-2023-6563