Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-server-spi-private@26.5.5
purl pkg:maven/org.keycloak/keycloak-server-spi-private@26.5.5
Next non-vulnerable version 26.6.3
Latest non-vulnerable version 26.6.3
Risk score 3.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-q35r-vvhv-vx5h
Aliases:
CVE-2026-3190
Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure A flaw was found in Keycloak. …
26.5.6
Vulnerable
GHSA-rr5q-3xwr-f323
Aliases:
CVE-2026-9704
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input A flaw was found in Keycloak. An authenticated user with …
26.6.3
Not vulnerable
GHSA-4q93-v92x-p89f
Aliases:
CVE-2026-9791
Keycloak Vulnerable to Incorrect Authorization A flaw was found in Keycloak. An authenticated user with existing organization membership can exploit …
26.6.3
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-x4p7-7chp-64hq
Keycloak: Unauthorized authentication via disabled SAML Identity Provider A flaw was found in Keycloak. A remote attacker could bypass security … CVE-2026-2603