Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.keycloak:keycloak-server-spi-private
Maven
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Keycloak Vulnerable to Incorrect Authorization
CVE-2026-9791 · GHSA-4Q93-V92X-P89F
org.keycloak:keycloak-server-spi-private
org.keycloak:keycloak-services
Maven
Medium
Fix reported
2026-07-02
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input
CVE-2026-9704 · GHSA-RR5Q-3XWR-F323
org.keycloak:keycloak-server-spi-private
org.keycloak:keycloak-services
Maven
Medium
Fix reported
2026-07-01
Keycloak: Unauthorized authentication via disabled SAML Identity Provider
CVE-2026-2603 · GHSA-X4P7-7CHP-64HQ
org.keycloak:keycloak-server-spi-private
org.keycloak:keycloak-services
Maven
High
Fix reported
2026-05-20
Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure
CVE-2026-3190 · GHSA-Q35R-VVHV-VX5H
org.keycloak:keycloak-model-jpa
org.keycloak:keycloak-server-spi-private
Maven
Medium
Fix reported
2026-04-02
Keycloak Server Private SPI: Improper Access Control Allows Administrators to Bypass Attribute Visibility Restrictions and Modify Unmanaged User Profile Attributes
CVE-2026-0871 · GHSA-V4JW-M6RM-399H
org.keycloak:keycloak-server-spi-private
Red Hat JBoss Enterprise Application Platform 8/keycloak-services
Maven
Red Hat
Medium
Fix reported
2026-02-28
Cross-site Scripting in keycloak
CVE-2020-10776 · GHSA-484Q-784P-8M5H
org.keycloak:keycloak-server-spi-private
org.keycloak:keycloak-services
Maven
Medium
Fix reported
2024-04-22
Client Spoofing within the Keycloak Device Authorisation Grant
CVE-2023-2585 · GHSA-F5H4-WMP5-XHG6
org.keycloak:keycloak-server-spi-private
org.keycloak:keycloak-services
Maven
Low
Fix reported
2024-02-16
