Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.keycloak/keycloak-services@24.0.7
purl pkg:maven/org.keycloak/keycloak-services@24.0.7
Tags Ghost
Next non-vulnerable version 26.7.2
Latest non-vulnerable version 26.7.2
Risk score 2.8
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-w8gr-xwp4-r9f7
Aliases:
CVE-2024-8883
Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect A misconfiguration flaw was found in Keycloak. This issue can … There are no reported fixed by versions.
Vulnerabilities fixed by this package (5)

Advisory Summary Aliases
GHSA-j76j-rqwj-jmvv
Duplicate Advisory: Keycloak Session Fixation vulnerability # Duplicate Advisory This advisory has been withdrawn because it is a duplicate of …
GHSA-gc7q-jgjv-vjr2
Keycloak Services has a potential bypass of brute force protection If an attacker launches many login attempts in parallel then … CVE-2024-4629
GHSA-j76j-rqwj-jmvv
Duplicate Advisory: Keycloak Session Fixation vulnerability # Duplicate Advisory This advisory has been withdrawn because it is a duplicate of …
CVE-2024-7341
Keycloak has session fixation in Elytron SAML adapters A session fixation issue was discovered in the SAML adapters provided by … GHSA-5rxp-2rhr-qwqv
GHSA-5rxp-2rhr-qwqv
Keycloak has session fixation in Elytron SAML adapters A session fixation issue was discovered in the SAML adapters provided by … CVE-2024-7341