Security
فارسی
All products

Red Hat Build of Keycloak/rhbk/keycloak-operator-bundle

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Keycloak Server-Side Request Forgery via OIDC token endpoint manipulationCVE-2026-4874 · GHSA-22RM-WP4X-V5CX org.keycloak:keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-operator-bundle MavenRed Hat Low Fix reported
Keycloak: Missing Check on Disabled Client for Docker Registry ProtocolCVE-2026-2733 · GHSA-FJF4-6F34-W64Q org.keycloak:keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-operator-bundle MavenRed Hat Low No fix reported
Keycloak’s OpenID Connect Dynamic Client Registration feature affected by Server-Side Request Forgery (SSRF)CVE-2026-1180 · GHSA-7VW6-5Q2F-7W5R org.keycloak:keycloak-adapter-coreRed Hat Build of Keycloak/rhbk/keycloak-operator-bundle MavenRed Hat Medium No fix reported
Keycloak Server-Side Request Forgery (SSRF) vulnerabilityCVE-2026-1518 · GHSA-FWHW-CHW4-GH37 org.keycloak:keycloak-parentRed Hat Build of Keycloak/rhbk/keycloak-operator-bundle MavenRed Hat Low No fix reported
keycloak-services: Blind Server-Side Request Forgery (SSRF) via HTTP Redirect Handling in KeycloakCVE-2026-4366 Red Hat Build of Keycloak/rhbk/keycloak-operator-bundleRed Hat Build of Keycloak/rhbk/keycloak-rhel9-operator Red Hat Medium No fix reported