Red Hat Build of Keycloak/keycloak-core
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination | org.keycloak:keycloak-coreRed Hat Build of Keycloak/keycloak-core | MavenRed Hat | High | Fix reported | |
| Keycloak Denial of Service via account lockout | org.keycloak:keycloak-servicesRed Hat Build of Keycloak/keycloak-core | MavenRed Hat | Low | Fix reported | |
| keycloak-core: keycloak-core: SAML adapter does not bind signed assertions to the configured identity provider issuer | Red Hat Build of Keycloak/keycloak-coreRed Hat Build of Keycloak/keycloak/rhbk-openshift-rhel9 | Red Hat | High | No fix reported | |
| keycloak-core: Reflected XSS via wildcard in OIDC redirect_uri. Incomplete fix of CVE-2023-6134 | Red Hat Build of Keycloak/keycloak-coreRed Hat Single Sign-On 7/rh-sso7-keycloak | Red Hat | Unknown | No fix reported |