Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-server-spi-private@26.1.0
purl pkg:maven/org.keycloak/keycloak-server-spi-private@26.1.0
Next non-vulnerable version 26.6.3
Latest non-vulnerable version 26.6.3
Risk score 3.6
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-v4jw-m6rm-399h
Aliases:
CVE-2026-0871
Keycloak Server Private SPI: Improper Access Control Allows Administrators to Bypass Attribute Visibility Restrictions and Modify Unmanaged User Profile Attributes …
26.5.2
Vulnerable
GHSA-q35r-vvhv-vx5h
Aliases:
CVE-2026-3190
Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure A flaw was found in Keycloak. …
26.5.6
Vulnerable
GHSA-x4p7-7chp-64hq
Aliases:
CVE-2026-2603
Keycloak: Unauthorized authentication via disabled SAML Identity Provider A flaw was found in Keycloak. A remote attacker could bypass security …
26.5.5
Vulnerable
GHSA-rr5q-3xwr-f323
Aliases:
CVE-2026-9704
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input A flaw was found in Keycloak. An authenticated user with …
26.6.3
Not vulnerable
GHSA-4q93-v92x-p89f
Aliases:
CVE-2026-9791
Keycloak Vulnerable to Incorrect Authorization A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit … There are no reported fixed by versions.
This package is not known to fix any advisories.