Search for packages
| purl | pkg:maven/org.keycloak/keycloak-saml-core@1.8.0.Final |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-4pc7-vqv5-5r3v
Aliases: CVE-2021-3827 GMS-2022-1098 |
ECP SAML binding bypasses authentication flows ### Description A flaw was found in keycloak, where the default ECP binding flow … |
Vulnerable |
|
GHSA-q2gp-gph3-88x9
Aliases: CVE-2022-2668 |
Keycloak allows arbitrary Javascript to be uploaded for SAML protocol mapper even if UPLOAD_SCRIPTS feature disabled ## Duplicate Advisory This … | There are no reported fixed by versions. |
|
GHSA-4xx7-2cx3-x473
|
Duplicate Advisory: Keycloak SAML signature validation flaw # Duplicate Advisory This advisory has been withdrawn because it is a duplicate … |
Vulnerable |
|
GHSA-p5mv-gj8j-xqgf
Aliases: CVE-2026-7307 |
Keycloak: Denial of Service via specially crafted SAML input A flaw was found in Keycloak. A remote, unauthenticated attacker can … |
Not vulnerable |
|
CVE-2024-8698
Aliases: GHSA-xgfv-xpx8-qhcr |
Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak A flaw exists in the SAML signature validation method … |
Vulnerable |
|
GHSA-xgfv-xpx8-qhcr
Aliases: CVE-2024-8698 |
Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak A flaw exists in the SAML signature validation method … |
Vulnerable |
|
GHSA-wmxr-6j5f-838p
Aliases: CVE-2026-2092 |
Duplicate Advisory: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions ### Duplicate Advisory This advisory has been withdrawn … | There are no reported fixed by versions. |
|
GHSA-xv6h-r36f-3gp5
Aliases: CVE-2026-2575 |
Keycloak: Denial of Service due to excessive SAMLRequest decompression A flaw was found in Keycloak. An unauthenticated remote attacker can … |
Vulnerable Vulnerable |