Security
فارسی
All products

org.keycloak:keycloak-parent

Maven · Package
26 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Keycloak Reflected XSSCVE-2017-12158 · GHSA-V38P-MQQ3-M6V5 org.keycloak:keycloak-parentRed Hat Mobile Application Platform 4/keycloak MavenRed Hat Medium Fix reported
Keycloak CSRF VulnerabilityCVE-2017-12159 · GHSA-7FMW-85QM-H22P org.keycloak:keycloak-parent Maven High Fix reported
Keycloak has Incorrect Behavior Order: Authorization Before Parsing and CanonicalizationCVE-2026-0707 · GHSA-GV94-WP4H-VV8P org.keycloak:keycloak-parent Maven Medium No fix reported
Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default rolesCVE-2022-2256 · GHSA-W9MF-83W3-FV49 org.keycloak:keycloak-parentvisualizer MavenWordPress Medium Fix reported
Keycloak Server-Side Request Forgery (SSRF) vulnerabilityCVE-2026-1518 · GHSA-FWHW-CHW4-GH37 org.keycloak:keycloak-parentRed Hat Build of Keycloak/rhbk/keycloak-operator-bundle MavenRed Hat Low No fix reported
Keycloak SAML javascript protocol mapper: Uploading of scripts through admin consoleCVE-2022-2668 · GHSA-WF7G-7H6H-678V org.keycloak:keycloak-parent Maven High Fix reported
Reflected XSS on clients-registrations endpointGHSA-M98G-63QJ-FP8J org.keycloak:keycloak-parent Maven Medium Fix reported
Generation of Error Message Containing Sensitive Information in KeycloakCVE-2020-1717 · GHSA-RVFC-G8J5-9CCF org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat Low No fix reported
Keycloak vulnerable to session takeover with OIDC offline refreshtokensCVE-2022-3916 · GHSA-97G8-XFVW-Q4HG org.keycloak:keycloak-parent Maven Medium Fix reported
Keycloak Authentication ErrorCVE-2019-14910 · GHSA-JF86-9434-F8C2 org.keycloak:keycloak-parent Maven Critical No fix reported
Keycloak Authentication ErrorCVE-2019-14909 · GHSA-FV4Q-WM8C-WJG4 org.keycloak:keycloak-parent Maven High No fix reported
Keycloak Oauth Implementation ErrorCVE-2017-12160 · GHSA-QC72-GFVW-76H7 org.keycloak:keycloak-parentRed Hat Mobile Application Platform 4/keycloak MavenRed Hat High Fix reported
Keycloak insufficient session expirationCVE-2021-3461 · GHSA-CM29-6WX7-P874 org.keycloak:keycloak-parent Maven High Fix reported
Keycloak Cross-site Scripting on OpenID connect login serviceCVE-2022-4137 · GHSA-9HHC-PJ4W-W5RV org.keycloak:keycloak-parent Maven High Fix reported
Keycloak Improper Bruteforce DetectionCVE-2018-14657 · GHSA-85V8-VX4W-Q684 org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat High Fix reported
Keycloak vulnerable to cross-site scripting via the state parameterCVE-2018-14655 · GHSA-458H-WV48-FQ75 org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat Medium No fix reported
Keycloak vulnerable to path traversal via double URL encoding CVE-2022-3782 · GHSA-G8Q8-FGGX-9R3Q org.keycloak:keycloak-parentRed Hat Fuse 7/keycloak MavenRed Hat Critical Fix reported
Incorrect implementation of lockout feature in KeycloakCVE-2021-3513 · GHSA-XV7H-95R7-595J org.keycloak:keycloak-parent Maven High Fix reported
Code injection in keycloakCVE-2021-20222 · GHSA-2MQ8-99Q7-55WX org.keycloak:keycloak-parent Maven High Fix reported
Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in KeycloakCVE-2020-1758 · GHSA-C597-F74M-JGC2 org.keycloak:keycloak-parentRed Hat OpenStack Platform 10 (Newton)/keycloak MavenRed Hat Medium Fix reported