Search for packages
| purl | pkg:maven/org.keycloak/keycloak-services@26.4.9 |
| Tags | Ghost |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-37gf-gmxv-74wv
|
Keycloak fails to verify if an Identity Provider (IdP) is enabled before issuing tokens A flaw was found in Keycloak. … |
CVE-2026-1486
|
|
GHSA-fm6w-rrp3-2x4w
|
Keycloak Affected by Broken Access Control Vulnerability in the UserManagedPermissionService A flaw was found in Keycloak. A significant Broken Access … |
CVE-2025-14778
|
|
GHSA-g78x-7vwx-9f58
|
Keycloak Admin API allows an administrator with limited privileges to retrieve sensitive custom attributes A flaw was found in Keycloak … |
CVE-2025-13881
|
|
GHSA-hcvw-475w-8g7p
|
Keycloak affected by improper invitation token validation A flaw was found in Keycloak. An attacker can exploit this vulnerability by … |
CVE-2026-1529
|
|
GHSA-wv3h-x6c4-r867
|
Keycloak services allows the issuance of access and refresh tokens for disabled users A flaw was found in the keycloak-services … |
CVE-2025-14559
|
|
CVE-2025-14778
|
Keycloak Affected by Broken Access Control Vulnerability in the UserManagedPermissionService A flaw was found in Keycloak. A significant Broken Access … |
GHSA-fm6w-rrp3-2x4w
|
|
CVE-2025-13881
|
Keycloak Admin API allows an administrator with limited privileges to retrieve sensitive custom attributes A flaw was found in Keycloak … |
GHSA-g78x-7vwx-9f58
|
|
CVE-2026-1529
|
Keycloak affected by improper invitation token validation A flaw was found in Keycloak. An attacker can exploit this vulnerability by … |
GHSA-hcvw-475w-8g7p
|
|
CVE-2026-1486
|
Keycloak fails to verify if an Identity Provider (IdP) is enabled before issuing tokens A flaw was found in Keycloak. … |
GHSA-37gf-gmxv-74wv
|
|
CVE-2025-14559
|
Keycloak services allows the issuance of access and refresh tokens for disabled users A flaw was found in the keycloak-services … |
GHSA-wv3h-x6c4-r867
|