Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-model-jpa@22.0.2
purl pkg:maven/org.keycloak/keycloak-model-jpa@22.0.2
Next non-vulnerable version 26.5.6
Latest non-vulnerable version 26.5.6
Risk score 1.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-q35r-vvhv-vx5h
Aliases:
CVE-2026-3190
Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure A flaw was found in Keycloak. …
26.5.6
Not vulnerable
CVE-2023-4918
Aliases:
GHSA-5q66-v53q-pm35
Cleartext Transmission of Sensitive Information A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers …
22.0.3
Vulnerable
CVE-2023-6291

URL Redirection to Untrusted Site ('Open Redirect') A flaw was found in the redirect_uri validation logic in Keycloak. This issue …
23.0.0
Vulnerable
This package is not known to fix any advisories.