| jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)CVE-2026-54514 · GHSA-HGJ6-7826-R7M5 |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| Apache Kerby vulnerable to denial of serviceCVE-2026-57914 · GHSA-X6VC-X4V4-HJHR |
org.apache.kerby:kerby-asn1Red Hat AMQ Clients/kerby-asn1 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Keycloak has authentication bypass via jwt algorithm confusionCVE-2026-11800 · GHSA-J97H-3F8R-MRJR |
org.keycloak:keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
MavenRed Hat |
High
|
Fix reported |
|
| MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticingCVE-2026-119281 · GHSA-GRFQ-R75J-RW9X |
org.mariadb.jdbc:mariadb-java-clientRed Hat Build of Keycloak/mariadb-java-client |
MavenRed Hat |
Medium
|
Fix reported |
|
| MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packetsCVE-2026-119276 · GHSA-H599-M3W5-9M7X |
org.mariadb.jdbc:mariadb-java-clientRed Hat Build of Keycloak/mariadb-java-client |
MavenRed Hat |
Medium
|
Fix reported |
|
| MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client filesCVE-2026-119210 · GHSA-FHX5-2XQW-2CGM |
org.mariadb.jdbc:mariadb-java-clientRed Hat Build of Keycloak/mariadb-java-client |
MavenRed Hat |
Medium
|
Fix reported |
|
| MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengthsCVE-2026-119279 · GHSA-797X-P4MC-JWPM |
org.mariadb.jdbc:mariadb-java-clientRed Hat Build of Keycloak/mariadb-java-client |
MavenRed Hat |
Medium
|
Fix reported |
|
| MariaDB Connector/J: XA recover() trusted server-supplied gtrid and bqual lengthsCVE-2026-119280 · GHSA-4JQ2-8V3C-97W8 |
org.mariadb.jdbc:mariadb-java-clientRed Hat Build of Keycloak/mariadb-java-client |
MavenRed Hat |
Low
|
Fix reported |
|
| Keycloak logs sensitive headersCVE-2025-11537 · GHSA-GV3V-2CPP-3PMQ |
org.keycloak:keycloak-quarkus-serverRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocationCVE-2026-102554 · GHSA-XXPH-C9WW-HJ94 |
com.google.guava:guavaExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
MavenRed Hat |
High
|
Fix reported |
|
| Keycloak's identity-first login flow exposes user informationCVE-2026-4633 · GHSA-RHGQ-F8X5-J2JC |
org.keycloak:keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
MavenRed Hat |
Low
|
Fix reported |
|
| Keycloak: Arbitrary code execution via Stored Cross-Site Scripting (XSS) in organization selection login pageCVE-2026-37980 · GHSA-M32F-8VH9-2HH3 |
org.keycloak:keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
MavenRed Hat |
Medium
|
No fix reported |
|
| jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationCVE-2026-59889 · GHSA-5GVW-P9QM-JGWH |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory ExhaustionCVE-2026-48043 · GHSA-C2GF-V879-257J |
io.netty:netty-codec-http2OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 |
MavenRed Hat |
Medium
|
Fix reported |
|
| jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)CVE-2026-68494 · GHSA-R7WM-3CXJ-WFF9 |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()CVE-2026-89407 · GHSA-P6PP-M3F8-5C89 |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)CVE-2026-89425 · GHSA-7HHH-6RMP-J9QF |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)CVE-2026-83557 · GHSA-GX83-3VF8-GH7J |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider ResolutionCVE-2026-19032 · GHSA-WJGM-6HV5-3CVF |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserializationCVE-2026-77310 · GHSA-VVGP-RFG2-7RR6 |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
