Security
فارسی
All products

org.keycloak:keycloak-quarkus-server

Maven · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Keycloak logs sensitive headersCVE-2025-11537 · GHSA-GV3V-2CPP-3PMQ org.keycloak:keycloak-quarkus-serverRed Hat Build of Keycloak/rhbk/keycloak-rhel9 MavenRed Hat Medium Fix reported
Keycloak has an improper input validation vulnerabilityCVE-2026-0976 · GHSA-V897-PV23-R8CW org.keycloak:keycloak-quarkus-serverRed Hat Build of Keycloak/keycloak-quarkus-server MavenRed Hat Low No fix reported
Keycloak Build Process Exposes Sensitive DataCVE-2024-10451 · GHSA-V7GV-XPGF-6395 org.keycloak:keycloak-quarkus-serverRed Hat Single Sign-On 7/keycloak-quarkus-server MavenRed Hat High Fix reported
Keycloak unable to restrict access to the admin consoleCVE-2025-10939 · GHSA-VJR8-56P3-FMQQ org.keycloak:keycloak-quarkus-server Maven Low Fix reported
Denial of Service in Keycloak Server via Security HeadersCVE-2024-11734 · GHSA-W3G8-R9GW-QRH8 org.keycloak:keycloak-quarkus-serverRed Hat Build of Keycloak/keycloak-quarkus-server MavenRed Hat Medium Fix reported
Keycloak allows unrestricted admin use of system and environment variablesCVE-2024-11736 · GHSA-F4V7-3MWW-9GC2 org.keycloak:keycloak-quarkus-serverRed Hat Build of Keycloak/keycloak-quarkus-server MavenRed Hat Medium Fix reported
Keycloak proxy header handling Denial-of-Service (DoS) vulnerabilityCVE-2024-9666 · GHSA-JGWC-JH89-RPGQ org.keycloak:keycloak-quarkus-serverRed Hat Build of Keycloak/keycloak-quarkus-server MavenRed Hat Medium Fix reported
Keycloak Path Traversal Vulnerability Due to External Control of File Name or PathCVE-2024-10492 · GHSA-5545-R4HG-RJ4M org.keycloak:keycloak-quarkus-serverRed Hat Single Sign-On 7/keycloak-quarkus-server MavenRed Hat Medium Fix reported
Keycloak on Quarkus CLI option for encrypted JGroups ignoredCVE-2024-10973 · GHSA-G6QQ-C9F9-2772 org.keycloak:keycloak-quarkus-server Maven Medium Fix reported