Browse Security Advisories
High Security Advisories for https://github.com/keycloak/keycloak from github Clear Filters
High
10 months ago
Keycloak TLS Client-Initiated Renegotiation Denial of Service
maven
org.keycloak:keycloak-quarkus-dist
High
over 1 year ago
Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination
maven
org.keycloak:keycloak-core
High
over 1 year ago
Keycloak Build Process Exposes Sensitive Data
maven
org.keycloak:keycloak-quarkus-server
High
over 1 year ago
org.keycloak:keycloak-services has Inefficient Regular Expression Complexity
maven
org.keycloak:keycloak-services
High
almost 2 years ago
Keycloak has session fixation in Elytron SAML adapters
maven
org.keycloak:keycloak-services
High
almost 2 years ago
Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak
maven
org.keycloak:keycloak-saml-core
High
about 2 years ago
Keycloak's admin API allows low privilege users to use administrative functions
maven
org.keycloak:keycloak-services
High
about 2 years ago
Keycloak exposes sensitive information in Pushed Authorization Requests (PAR)
maven
org.keycloak:keycloak-services
High
over 2 years ago
Keycloak path traversal vulnerability in redirection validation
maven
org.keycloak:keycloak-services
High
over 2 years ago
Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS
maven
org.keycloak:keycloak-services
High
over 2 years ago
Keycloak path traversal vulnerability in the redirect validation
maven
org.keycloak:keycloak-services
High
over 2 years ago
The redirect_uri validation logic allows for bypassing explicitly allowed hosts that would otherwise be restricted
maven
org.keycloak:keycloak-services
High
over 2 years ago
Allocation of Resources Without Limits in Keycloak
maven
org.keycloak:keycloak-model-jpa
High
almost 3 years ago
Keycloak vulnerable to Plaintext Storage of User Password
maven
org.keycloak:keycloak-core
High
about 3 years ago
Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients
maven
org.keycloak:keycloak-services
High
over 3 years ago
Keycloak vulnerable to user impersonation via stolen UUID code
maven
org.keycloak:keycloak-services
High
over 3 years ago
Keycloak Cross-site Scripting on OpenID connect login service
maven
org.keycloak:keycloak-parent
High
almost 4 years ago
Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console
maven
org.keycloak:keycloak-parent
High
almost 4 years ago
Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow
maven
org.keycloak:keycloak-core
High
almost 4 years ago
Incorrect implementation of lockout feature in Keycloak
maven
org.keycloak:keycloak-parent
High
about 4 years ago
Keycloak Unauthenticated Access
maven
org.keycloak:keycloak-model-jpa, org.keycloak:keycloak-model-infinispan
High
over 4 years ago
ECP SAML binding bypasses authentication flows
maven
org.keycloak:keycloak-saml-core
High
over 4 years ago
Allocation of Resources Without Limits or Throttling in Keycloak
maven
org.keycloak:keycloak-parent
High
over 4 years ago
Improper Input Validation in Keycloak
maven
org.keycloak:keycloak-common, org.keycloak:keycloak-core
High
over 4 years ago
Keycloak Gatekeeper vulnerable to bypass on using lower case HTTP headers
go
github.com/keycloak/keycloak-gatekeeper
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,068
Erlang Ecosystem Foundation
172
GitHub Advisory Database
34,510
Filter by Ecosystem
npm
2,918
maven
2,694
pypi
2,558
packagist
1,942
go
1,854
nuget
1,388
cargo
558
rubygems
374
hex
48
actions
23
swift
23
pub
6
Filter by Package
Microsoft.ChakraCore
234
openclaw
217
tensorflow
122
tensorflow-cpu
111
tensorflow-gpu
110
magento/community-edition
104
open-webui
73
moodle/moodle
68
org.jenkins-ci.main:jenkins-core
62
flowise
61
wwbn/avideo
56
n8n
53
parse-server
49
com.fasterxml.jackson.core:jackson-databind
45
Django
43
mlflow
43
craftcms/cms
41
apache-airflow
41
magento/project-community-edition
41
pimcore/pimcore
39
dolibarr/dolibarr
38
librenms/librenms
37
org.apache.tomcat:tomcat
37
github.com/rancher/rancher
36
getgrav/grav
33
drupal/core
32
typo3/cms
32
thorsten/phpmyfaq
32
salt
31
typo3/cms-core
31
code.gitea.io/gitea
31
gogs.io/gogs
31
pillow
28
Plone
28
phpmyadmin/phpmyadmin
28
org.apache.tomcat.embed:tomcat-embed-core
27
microweber/microweber
27
praisonai
26
next
26
org.keycloak:keycloak-services
26
nokogiri
26
symfony/symfony
26
@budibase/server
26
org.apache.struts:struts2-core
25
drupal/drupal
25
com.liferay.portal:release.portal.bom
25
github.com/mattermost/mattermost-server
24
Magick.NET-Q16-AnyCPU
24
ansible
24
github.com/siyuan-note/siyuan/kernel
24
opencv-contrib-python
23
github.com/hashicorp/vault
23
Magick.NET-Q16-HDRI-AnyCPU
23
github.com/traefik/traefik/v2
23
opencv-python
23
@anthropic-ai/claude-code
22
com.thoughtworks.xstream:xstream
22
github.com/filebrowser/filebrowser/v2
21
Magick.NET-Q16-HDRI-OpenMP-arm64
21
Pillow
21
matrix-synapse
21
com.jfinal:jfinal
21
electron
21
Magick.NET-Q16-HDRI-x86
21
github.com/traefik/traefik/v3
21
django
21
Magick.NET-Q8-AnyCPU
21
pocketmine/pocketmine-mp
20
Magick.NET-Q16-x86
20
Magick.NET-Q8-x86
20
Magick.NET-Q16-HDRI-arm64
20
mantisbt/mantisbt
20
picklescan
20
github.com/zitadel/zitadel
20
froxlor/froxlor
19
Microsoft.NetCore.App.Runtime.win-x64
19
Microsoft.NetCore.App.Runtime.win-x86
19
Magick.NET-Q16-HDRI-x64
19
GitPython
19
vllm
19
Magick.NET-Q8-x64
19
org.jenkins-ci.plugins:script-security
19
io.undertow:undertow-core
19
Microsoft.NetCore.App.Runtime.win-arm64
19
Microsoft.NetCore.App.Runtime.win-arm
19
directus
19
gradio
19
Microsoft.AspNetCore.App.Runtime.win-x64
18
rack
18
Magick.NET-Q16-OpenMP-x64
18
Magick.NET-Q8-OpenMP-arm64
18
Magick.NET-Q8-arm64
18
Magick.NET-Q16-OpenMP-arm64
18
rdiffweb
18
pyload-ng
18
keystone
18
com.liferay.portal:release.dxp.bom
18
Magick.NET-Q16-arm64
18
axios
18
deno
18
Magick.NET-Q16-x64
18
Magick.NET-Q8-OpenMP-x64
18
getkirby/cms
17
phpoffice/phpspreadsheet
17
Microsoft.AspNetCore.App.Runtime.linux-x64
17
shopware/platform
17
org.xwiki.platform:xwiki-platform-oldcore
17
litellm
17
mautic/core
17
github.com/grafana/grafana
17
concrete5/concrete5
16
Microsoft.NetCore.App.Runtime.linux-musl-arm
16
Microsoft.NetCore.App.Runtime.linux-arm64
16
yeswiki/yeswiki
16
org.apache.solr:solr-core
16
Microsoft.AspNetCore.App.Runtime.win-x86
16
Microsoft.NetCore.App.Runtime.linux-musl-arm64
16
shopware/core
16
Microsoft.AspNetCore.App.Runtime.linux-arm
16
github.com/nats-io/nats-server/v2
16
surrealdb
16
openssl-src
16
PraisonAI
16
Microsoft.NetCore.App.Runtime.linux-arm
16
openbabel
16
Microsoft.AspNetCore.App.Runtime.win-arm
16
github.com/usememos/memos
16
Microsoft.AspNetCore.App.Runtime.linux-arm64
16
Microsoft.NetCore.App.Runtime.linux-musl-x64
16
nltk
16
Microsoft.AspNetCore.App.Runtime.win-arm64
15
apache-superset
15
Microsoft.NetCore.App.Runtime.linux-x64
15
praisonaiagents
15
nilsteampassnet/teampass
15
statamic/cms
15
github.com/kyverno/kyverno
15
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
15
github.com/hashicorp/consul
15
org.apache.tomcat:tomcat-catalina
15
github.com/mattermost/mattermost/server/v8
15
baserproject/basercms
15
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
15
Microsoft.NetCore.App.Runtime.osx-arm64
14
devcode-it/openstamanager
14
mindsdb
14
net.mingsoft:ms-mcms
14
pnpm
14
tar
14
org.apache.openmeetings:openmeetings-parent
14
org.apache.tomcat:tomcat-coyote
14
phpmyfaq/phpmyfaq
14
langflow
14
Microsoft.AspNetCore.App.Runtime.osx-x64
14
snipe/snipe-it
14
Microsoft.NetCore.App.Runtime.osx-x64
14
org.keycloak:keycloak-core
14
Magick.NET-Q16-HDRI-OpenMP-x64
14
centreon/centreon
14
vyper
14
golang.org/x/net
13
github.com/hashicorp/nomad
13
cockpit-hq/cockpit
13
github.com/coder/coder/v2
13
better-auth
13
pgadmin4
13
rubygems-update
13
openmage/magento-lts
12
cryptography
12
praisonai-platform
12
flowise-components
12
github.com/argoproj/argo-cd/v2
12
composer/composer
12
github.com/argoproj/argo-cd
12
github.com/ethereum/go-ethereum
12
github.com/gotenberg/gotenberg/v8
12
activerecord
12
silverstripe/framework
12
laravel/framework
11
github.com/docker/docker
11
org.springframework.security:spring-security-core
11
actionpack
11
github.com/argoproj/argo-workflows/v3
11
intelliants/subrion
11
github.com/zitadel/zitadel/v2
11
datamodel-code-generator
11
react-router
11
keras
11
org.keycloak:keycloak-parent
11
github.com/ollama/ollama
11
github.com/traefik/traefik
11
@haxtheweb/haxcms-nodejs
10
org.bouncycastle:bcprov-jdk14
10
admidio/admidio
10
Microsoft.WindowsDesktop.App.Runtime.win-x86
10
github.com/coredns/coredns
10
Microsoft.NETCore.App.Runtime.win-x86
10
Glances
10
fickling
10
org.eclipse.jetty:jetty-server
10
Filter by Repository
https://github.com/chakra-core/ChakraCore
204
https://github.com/tensorflow/tensorflow
122
https://github.com/xwiki/xwiki-platform
64
https://github.com/django/django
52
https://github.com/FasterXML/jackson-databind
44
https://github.com/jenkinsci/jenkins
43
https://github.com/apache/tomcat
42
https://github.com/apache/airflow
39
https://github.com/python-pillow/Pillow
35
https://github.com/moodle/moodle
34
https://github.com/keycloak/keycloak
32
https://github.com/librenms/librenms
28
https://github.com/pimcore/pimcore
28
https://github.com/dotnet/runtime
28
https://github.com/rancher/rancher
27
https://github.com/microweber/microweber
25
https://github.com/opencv/opencv
25
https://github.com/symfony/symfony
23
https://github.com/x-stream/xstream
22
https://github.com/Dolibarr/dolibarr
21
https://github.com/sparklemotion/nokogiri
20
https://github.com/apache/struts
20
https://github.com/ansible/ansible
19
https://github.com/spring-projects/spring-framework
19
https://github.com/pmmp/PocketMine-MP
18
https://github.com/TYPO3/typo3
18
https://github.com/thorsten/phpmyfaq
18
https://github.com/zitadel/zitadel
18
https://github.com/parse-community/parse-server
17
https://github.com/ikus060/rdiffweb
17
https://github.com/plone/Products.CMFPlone
16
https://github.com/gradio-app/gradio
16
https://github.com/mlflow/mlflow
16
https://github.com/apache/inlong
15
https://github.com/kubernetes/kubernetes
15
https://github.com/github/advisory-database
15
https://github.com/rails/rails
15
https://github.com/getgrav/grav
15
https://github.com/jenkinsci/script-security-plugin
14
https://github.com/grafana/grafana
14
https://github.com/usememos/memos
14
https://github.com/vyperlang/vyper
14
https://github.com/openstack/keystone
14
https://github.com/argoproj/argo-cd
14
https://github.com/matrix-org/synapse
13
https://github.com/undertow-io/undertow
13
https://github.com/mindsdb/mindsdb
13
https://github.com/liferay/liferay-portal
13
https://github.com/saltstack/salt
13
https://github.com/mautic/mautic
13
https://github.com/directus/directus
12
https://github.com/PHPOffice/PhpSpreadsheet
12
https://github.com/hashicorp/consul
12
https://github.com/denoland/deno
12
https://github.com/electron/electron
12
https://github.com/apache/nifi
11
https://github.com/dotnet/aspnetcore
11
https://github.com/silverstripe/silverstripe-framework
11
https://github.com/run-llama/llama_index
11
https://github.com/strapi/strapi
11
https://github.com/hashicorp/vault
11
https://github.com/netty/netty
10
https://github.com/surrealdb/surrealdb
10
https://github.com/octobercms/october
10
https://github.com/centreon/centreon
10
https://github.com/go-gitea/gitea
10
https://github.com/rack/rack
10
https://github.com/FlowiseAI/Flowise
10
https://github.com/OpenMage/magento-lts
10
https://github.com/golang/go
10
https://github.com/funadmin/funadmin
10
https://github.com/vercel/next.js
9
https://github.com/traefik/traefik
9
https://github.com/rusqlite/rusqlite
9
https://github.com/apache/cxf
9
https://github.com/spring-projects/spring-security
9
https://github.com/laravel/framework
9
https://github.com/h2oai/h2o-3
9
https://github.com/snipe/snipe-it
9
https://github.com/apache/camel
9
https://github.com/anthropics/claude-code
9
https://github.com/cui2shark/cms
9
https://github.com/openstack/nova
9
https://github.com/apollographql/router
9
https://github.com/cloudfoundry/uaa
9
https://github.com/nervosnetwork/ckb
9
https://github.com/geoserver/geoserver
9
https://github.com/pyload/pyload
9
https://github.com/nilsteampassnet/teampass
9
https://github.com/opencontainers/runc
9
https://github.com/gogs/gogs
8
https://github.com/backstage/backstage
8
https://github.com/TYPO3/TYPO3.CMS
8
https://github.com/cockpit-hq/cockpit
8
https://github.com/OpenRefine/OpenRefine
8
https://github.com/dnnsoftware/Dnn.Platform
8
https://github.com/nats-io/nats-server
8
https://github.com/shopware/platform
8
https://github.com/vllm-project/vllm
8
https://github.com/pyca/cryptography
8
https://github.com/OPCFoundation/UA-.NETStandard
8
https://github.com/open-webui/open-webui
8
https://github.com/bcgit/bc-java
8
https://github.com/PaddlePaddle/Paddle
8
https://github.com/apache/kylin
8
https://github.com/craftcms/cms
8
https://github.com/phpmyadmin/phpmyadmin
8
https://github.com/cobbler/cobbler
7
https://github.com/DSpace/DSpace
7
https://github.com/composer/composer
7
https://github.com/rubygems/rubygems
7
https://github.com/shopware/shopware
7
https://github.com/mantisbt/mantisbt
7
https://github.com/contao/contao
7
https://github.com/apache/activemq
7
https://github.com/YesWiki/yeswiki
7
https://github.com/smarty-php/smarty
7
https://github.com/filebrowser/filebrowser
7
https://github.com/PHPMailer/PHPMailer
7
https://github.com/mattermost/mattermost
7
https://github.com/parisneo/lollms
7
https://github.com/xuxueli/xxl-job
7
https://github.com/faucetsdn/ryu
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/magento/magento2
7
https://github.com/eclipse/jetty.project
7
https://github.com/WWBN/AVideo
6
https://github.com/OpenZeppelin/openzeppelin-contracts
6
https://github.com/mmaitre314/picklescan
6
https://github.com/RaspAP/raspap-webgui
6
https://github.com/kiwitcms/Kiwi
6
https://github.com/Graylog2/graylog2-server
6
https://github.com/cilium/cilium
6
https://github.com/istio/istio
6
https://github.com/intelliants/subrion
6
https://github.com/OpenNMS/opennms
6
https://github.com/drupal/core
6
https://github.com/minio/minio
6
https://github.com/gravitl/netmaker
6
https://github.com/quarkusio/quarkus
6
https://github.com/npm/node-tar
6
https://github.com/nilsteampassnet/TeamPass
6
https://github.com/protocolbuffers/protobuf
6
https://github.com/guzzle/guzzle
6
https://github.com/aubio/aubio
6
https://github.com/ethyca/fides
6
https://github.com/cosmos/cosmos-sdk
6
https://github.com/nautobot/nautobot
6
https://github.com/DrunkenShells/Disclosures
6
https://github.com/TYPO3-CMS/core
6
https://github.com/opencast/opencast
6
https://github.com/pgadmin-org/pgadmin4
6
https://github.com/dromara/hutool
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/bodil/sized-chunks
6
https://github.com/hyperledger/fabric
6
https://github.com/froxlor/froxlor
6
https://github.com/getsentry/sentry
6
https://github.com/sequelize/sequelize
6
https://github.com/cefsharp/CefSharp
6
https://github.com/langchain-ai/langchain
6
https://github.com/ImageMagick/ImageMagick
6
https://github.com/goharbor/harbor
6
https://github.com/kyverno/kyverno
6
https://github.com/containers/podman
6
https://github.com/CVEProject/cvelist
6
https://github.com/getkirby/kirby
6
https://github.com/haxtheweb/issues
6
https://github.com/vantage6/vantage6
5
https://github.com/apache/hadoop
5
https://sourceforge.net/projects/phpmyadmin.sourceforge.net
5
https://github.com/docker/docker
5
https://github.com/BlackFan/client-side-prototype-pollution
5
https://github.com/apache/xmlgraphics-batik
5
https://github.com/cloudflare/cfrpki
5
https://github.com/cakephp/cakephp
5
https://github.com/beego/beego
5
https://github.com/cri-o/cri-o
5
https://github.com/n8n-io/n8n
5
https://github.com/PrestaShop/PrestaShop
5
https://github.com/opencart/opencart
5
https://github.com/forkcms/forkcms
5
https://github.com/statamic/cms
5
https://github.com/faisalman/ua-parser-js
5
https://github.com/hashicorp/go-getter
5
https://github.com/sebhildebrandt/systeminformation
5
https://github.com/cometbft/cometbft
5
https://github.com/hpcng/singularity
5
https://github.com/codeigniter4/CodeIgniter4
5
https://github.com/IBAX-io/go-ibax
5
https://github.com/thorsten/phpMyFAQ
5
https://github.com/element-hq/synapse
5
https://github.com/ethereum/go-ethereum
5
https://github.com/yiisoft/yii2
5
https://github.com/pear/Archive_Tar
5
https://github.com/zopefoundation/Zope
5
https://github.com/HumanSignal/label-studio
5
https://github.com/zendframework/zendframework
5
https://github.com/apache/geode
5