Browse Security Advisories
Moderate Security Advisories for https://github.com/keycloak/keycloak from github Clear Filters
Moderate
10 months ago
Keycloak does not invalidate sessions when "Remember Me" is disabled
maven
org.keycloak:keycloak-services
Moderate
10 months ago
Keycloak does not invalidate offline sessions when the offline_access scope is removed
maven
org.keycloak:keycloak-services
Moderate
10 months ago
Keycloak error_description injection on error pages that can trigger phishing attacks
maven
org.keycloak:keycloak-admin-ui, org.keycloak:keycloak-account-ui
Moderate
10 months ago
Keycloak Potential Variable Reference in Model Storage Services
maven
org.keycloak:keycloak-model-storage-services
Moderate
about 1 year ago
Keycloak Privilege Escalation Vulnerability in Admin Console (FGAPv2 Enabled)
maven
org.keycloak:keycloak-services
Moderate
about 1 year ago
Keycloak phishing attack via email verification step in first login flow
maven
org.keycloak:keycloak-services
Moderate
over 1 year ago
Keycloak vulnerable to two factor authentication bypass
maven
org.keycloak:keycloak-services
Moderate
over 1 year ago
Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims
maven
org.keycloak:keycloak-services
Moderate
over 1 year ago
Authentication Bypass Due to Missing LDAP Bind After Password Reset in Keycloak
maven
org.keycloak:keycloak-ldap-federation
Moderate
over 1 year ago
Keycloak on Quarkus CLI option for encrypted JGroups ignored
maven
org.keycloak:keycloak-quarkus-server
Moderate
over 1 year ago
Denial of Service in Keycloak Server via Security Headers
maven
org.keycloak:keycloak-quarkus-server
Moderate
over 1 year ago
Keycloak allows unrestricted admin use of system and environment variables
maven
org.keycloak:keycloak-quarkus-server
Moderate
over 1 year ago
Keycloak proxy header handling Denial-of-Service (DoS) vulnerability
maven
org.keycloak:keycloak-quarkus-server
Moderate
over 1 year ago
Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path
maven
org.keycloak:keycloak-quarkus-server
Moderate
almost 2 years ago
Keycloaks's One Time Passcode (OTP) is valid longer than expiration timeSeverity
maven
org.keycloak:keycloak-core
Moderate
almost 2 years ago
Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect
maven
org.keycloak:keycloak-services
Moderate
almost 2 years ago
Keycloak Services has a potential bypass of brute force protection
maven
org.keycloak:keycloak-services
Moderate
over 2 years ago
Keycloak vulnerable to session hijacking via re-authentication
maven
org.keycloak:keycloak-services
Moderate
over 2 years ago
Keycloak vulnerable to log Injection during WebAuthn authentication or registration
maven
org.keycloak:keycloak-services
Moderate
over 2 years ago
Keycloak Authorization Bypass vulnerability
maven
org.keycloak:keycloak-services
Moderate
over 2 years ago
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow
maven
org.keycloak:keycloak-services
Moderate
over 2 years ago
Keycloak secondary factor bypass in step-up authentication
maven
org.keycloak:keycloak-services
Moderate
over 2 years ago
keycloak-core: open redirect via "form_post.jwt" JARM response mode
maven
org.keycloak:keycloak-core
Moderate
over 2 years ago
Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri
maven
org.keycloak:keycloak-services
Moderate
about 3 years ago
Keycloak: Impersonation and lockout possible through incorrect handling of email trust
maven
org.keycloak:keycloak-core
Moderate
about 3 years ago
Keycloak Untrusted Certificate Validation vulnerability
maven
org.keycloak:keycloak-core
Moderate
over 3 years ago
HTML Injection in Keycloak Admin REST API
maven
org.keycloak:keycloak-services
Moderate
over 3 years ago
Keycloak vulnerable to Cross-site Scripting
maven
org.keycloak:keycloak-services
Moderate
over 3 years ago
Keycloak has lack of validation of access token on client registrations endpoint
maven
org.keycloak:keycloak-core
Moderate
over 3 years ago
Keycloak vulnerable to session takeover with OIDC offline refreshtokens
maven
org.keycloak:keycloak-parent
Moderate
over 3 years ago
Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown
maven
org.keycloak:keycloak-core
Moderate
almost 4 years ago
Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles
maven
org.keycloak:keycloak-parent
Moderate
almost 4 years ago
Keycloak has Files or Directories Accessible to External Parties
maven
org.keycloak:keycloak-core
Moderate
almost 4 years ago
Keycloak XSS via use of malicious payload as group name when creating new group from admin console
maven
org.keycloak:keycloak-core
Moderate
almost 4 years ago
Keycloak vulnerable to Improper Certificate Validation
maven
org.keycloak:keycloak-core
Moderate
about 4 years ago
Keycloak discloses information without authentication
maven
org.keycloak:keycloak-core
Moderate
about 4 years ago
Keycloak leaks sensitive information in logged exceptions
maven
org.keycloak:keycloak-core
Moderate
about 4 years ago
Keycloak users may be able to remove MFA from other users' devices
maven
org.keycloak:keycloak-core
Moderate
over 4 years ago
JBoss KeyCloak Cross-site Scripting Vulnerability
maven
org.keycloak:keycloak-core
Moderate
over 4 years ago
JBoss KeyCloak is vulnerable to soft token deletion via CSRF
maven
org.keycloak:keycloak-services
Moderate
over 4 years ago
Keycloak Authentication Error
maven
org.keycloak:keycloak-services, org.keycloak:keycloak-saml-adapter-core
Moderate
over 4 years ago
Reflected XSS on clients-registrations endpoint
maven
org.keycloak:keycloak-parent
Moderate
over 4 years ago
Cross-site Scripting in keycloak
maven
org.keycloak:keycloak-services, org.keycloak:keycloak-server-spi-private
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,068
Erlang Ecosystem Foundation
172
GitHub Advisory Database
34,510
Filter by Ecosystem
maven
3,747
packagist
3,696
pypi
2,752
npm
2,575
nuget
2,294
go
2,282
cargo
618
rubygems
497
hex
39
swift
22
actions
16
pub
3
Filter by Package
moodle/moodle
318
openclaw
300
tensorflow
200
magento/community-edition
193
tensorflow-cpu
190
tensorflow-gpu
180
org.jenkins-ci.main:jenkins-core
158
github.com/mattermost/mattermost/server/v8
129
github.com/mattermost/mattermost-server
114
com.liferay.portal:release.portal.bom
114
typo3/cms
112
org.apache.tomcat:tomcat
100
Magick.NET-Q16-HDRI-AnyCPU
98
Magick.NET-Q16-AnyCPU
98
Magick.NET-Q16-HDRI-x86
96
Magick.NET-Q16-HDRI-OpenMP-arm64
94
Magick.NET-Q16-HDRI-x64
94
Magick.NET-Q16-x86
93
Magick.NET-Q16-OpenMP-x64
92
Magick.NET-Q16-OpenMP-arm64
92
Magick.NET-Q8-AnyCPU
92
Magick.NET-Q16-arm64
92
Magick.NET-Q16-HDRI-arm64
91
pimcore/pimcore
91
Magick.NET-Q8-OpenMP-arm64
88
Magick.NET-Q16-x64
87
Magick.NET-Q8-x86
86
Magick.NET-Q8-arm64
85
Magick.NET-Q8-OpenMP-x64
84
com.liferay.portal:release.dxp.bom
81
Magick.NET-Q8-x64
81
typo3/cms-core
80
wwbn/avideo
73
microweber/microweber
72
apache-airflow
70
silverstripe/framework
67
craftcms/cms
65
thorsten/phpmyfaq
65
concrete5/concrete5
65
open-webui
64
n8n
62
magento/project-community-edition
59
Magick.NET-Q16-HDRI-OpenMP-x64
57
phpmyadmin/phpmyadmin
56
drupal/core
56
dolibarr/dolibarr
56
librenms/librenms
54
github.com/usememos/memos
54
org.keycloak:keycloak-services
51
mantisbt/mantisbt
49
apache-superset
47
symfony/symfony
47
Django
44
code.gitea.io/gitea
44
Magick.NET-Q16-OpenMP-x86
44
actionpack
42
nocodb
41
parse-server
40
snipe/snipe-it
39
drupal/drupal
36
hono
36
github.com/grafana/grafana
36
org.elasticsearch:elasticsearch
35
showdoc/showdoc
35
directus
34
shopware/platform
34
pypdf
34
surrealdb
33
admidio/admidio
33
picklescan
33
org.keycloak:keycloak-core
32
getgrav/grav
30
nova
30
shopware/core
30
electron
30
plone
29
mautic/core
29
github.com/mattermost/mattermost-server/v6
29
baserproject/basercms
29
vllm
29
ghost
29
intelliants/subrion
28
next
28
getkirby/cms
28
ansible
27
moin
27
rack
26
gogs.io/gogs
26
froxlor/froxlor
26
aiohttp
26
github.com/traefik/traefik/v3
25
k8s.io/kubernetes
25
statamic/cms
24
flowise
24
github.com/cilium/cilium
23
phpmyfaq/phpmyfaq
23
github.com/traefik/traefik/v2
23
Plone
23
axios
23
grumpydictator/firefly-iii
22
django
22
github.com/hashicorp/vault
22
code.vikunja.io/api
21
gradio
21
github.com/answerdev/answer
21
wasmtime
21
github.com/openfga/openfga
21
matrix-synapse
21
nilsteampassnet/teampass
21
DotNetNuke.Core
21
mediawiki/core
20
kimai/kimai
20
pyload-ng
20
dompurify
19
shopware/shopware
19
org.apache.struts:struts2-core
19
github.com/fleetdm/fleet/v4
19
org.apache.tomcat.embed:tomcat-embed-core
19
remdex/livehelperchat
18
github.com/docker/docker
18
contao/core-bundle
18
github.com/hashicorp/consul
17
org.opencms:opencms-core
17
prestashop/prestashop
17
salt
17
keystone
17
github.com/argoproj/argo-cd/v2
17
io.netty:netty-codec-http
16
zendframework/zendframework1
16
typo3/cms-backend
16
sylius/sylius
16
rdiffweb
16
io.undertow:undertow-core
16
undici
16
github.com/siyuan-note/siyuan/kernel
16
github.com/hashicorp/nomad
16
nokogiri
16
yetiforce/yetiforce-crm
15
org.xwiki.platform:xwiki-platform-oldcore
15
glance
15
vyper
15
org.springframework.security:spring-security-core
15
weblate
15
com.liferay.portal:com.liferay.portal.impl
15
org.apache.jspwiki:jspwiki-main
15
activesupport
14
tinymce
14
pnpm
14
feehi/feehicms
14
wagtail
14
github.com/goharbor/harbor
14
github.com/filebrowser/filebrowser/v2
14
astro
14
github.com/traefik/traefik
14
puppet
14
feehi/cms
14
mistune
13
github.com/containerd/containerd
13
org.eclipse.jetty:jetty-server
13
com.jfinal:jfinal
13
svelte
13
forkcms/forkcms
13
Umbraco.Cms
13
transformers
13
org.springframework:spring-webmvc
13
github.com/ethereum/go-ethereum
13
com.thoughtworks.xstream:xstream
13
vite
13
github.com/zitadel/zitadel
13
coreutils
13
tribalsystems/zenario
13
helm.sh/helm/v3
13
deno
13
craftcms/commerce
13
simplesamlphp/simplesamlphp
12
lavalite/cms
12
github.com/rancher/rancher
12
@openzeppelin/contracts-upgradeable
12
roundup
12
phpoffice/phpspreadsheet
12
org.bouncycastle:bcprov-jdk14
12
facturascripts/facturascripts
12
wallabag/wallabag
12
ec-cube/ec-cube
12
github.com/openbao/openbao
12
@openzeppelin/contracts
12
github.com/apache/incubator-answer
12
mlflow
12
mermaid
12
OctoPrint
12
ci4-cms-erp/ci4ms
11
TinyMCE
11
nicegui
11
github.com/coder/coder/v2
11
genix/cms
11
cakephp/cakephp
11
horizon
11
MessagePack
11
renovate
11
org.keycloak:keycloak-parent
11
Filter by Repository
https://github.com/tensorflow/tensorflow
200
https://github.com/moodle/moodle
192
https://github.com/liferay/liferay-portal
143
https://github.com/jenkinsci/jenkins
109
https://github.com/pimcore/pimcore
85
https://github.com/TYPO3/typo3
63
https://github.com/microweber/microweber
63
https://github.com/apache/tomcat
60
https://github.com/xwiki/xwiki-platform
50
https://github.com/silverstripe/silverstripe-framework
50
https://github.com/django/django
50
https://github.com/usememos/memos
50
https://github.com/rails/rails
46
https://github.com/thorsten/phpmyfaq
45
https://github.com/keycloak/keycloak
45
https://github.com/apache/airflow
44
https://github.com/librenms/librenms
42
https://github.com/kubernetes/kubernetes
40
https://github.com/mattermost/mattermost
36
https://github.com/mantisbt/mantisbt
35
https://github.com/star7th/showdoc
32
https://github.com/mmaitre314/picklescan
30
https://github.com/concretecms/concretecms
28
https://github.com/grafana/grafana
27
https://github.com/symfony/symfony
27
https://github.com/mautic/mautic
27
https://github.com/spring-projects/spring-framework
26
https://github.com/ansible/ansible
26
https://github.com/craftcms/cms
26
https://github.com/phpmyadmin/phpmyadmin
26
https://github.com/shopware/shopware
24
https://github.com/argoproj/argo-cd
24
https://github.com/directus/directus
24
https://github.com/umbraco/Umbraco-CMS
23
https://github.com/Dolibarr/dolibarr
22
https://github.com/answerdev/answer
21
https://github.com/firefly-iii/firefly-iii
20
https://github.com/apache/activemq
20
https://github.com/snipe/snipe-it
20
https://github.com/magento/magento2
20
https://github.com/plone/Products.CMFPlone
20
https://github.com/cilium/cilium
19
https://github.com/openstack/nova
18
https://github.com/contao/contao
18
https://github.com/livehelperchat/livehelperchat
18
https://github.com/apache/struts
17
https://github.com/matrix-org/synapse
16
https://github.com/shopware/platform
16
https://github.com/ikus060/rdiffweb
16
https://github.com/gradio-app/gradio
16
https://github.com/CVEProject/cvelist
15
https://github.com/vyperlang/vyper
15
https://github.com/apache/cxf
15
https://github.com/netty/netty
15
https://github.com/getkirby/kirby
15
https://github.com/moby/moby
14
https://github.com/tinymce/tinymce
14
https://github.com/PaddlePaddle/Paddle
14
https://github.com/OpenNMS/opennms
14
https://github.com/baserproject/basercms
14
https://github.com/TYPO3/TYPO3.CMS
14
https://github.com/x-stream/xstream
14
https://github.com/saltstack/salt
14
https://github.com/yetiforcecompany/yetiforcecrm
14
https://github.com/froxlor/froxlor
14
https://github.com/geoserver/geoserver
14
https://github.com/PrestaShop/PrestaShop
13
https://github.com/rack/rack
13
https://github.com/octobercms/october
13
https://github.com/strapi/strapi
13
https://github.com/nilsteampassnet/TeamPass
13
https://github.com/apache/nifi
13
https://github.com/containerd/containerd
13
https://github.com/bcgit/bc-java
13
https://github.com/go-gitea/gitea
13
https://github.com/goharbor/harbor
13
https://github.com/openfga/openfga
13
https://github.com/openstack/keystone
12
https://github.com/OpenZeppelin/openzeppelin-contracts
12
https://github.com/TYPO3-CMS/core
12
https://github.com/helm/helm
12
https://github.com/hashicorp/consul
12
https://github.com/huggingface/transformers
12
https://github.com/traefik/traefik
12
https://github.com/forkcms/forkcms
11
https://github.com/vitejs/vite
11
https://github.com/github/advisory-database
11
https://github.com/vaadin/platform
11
https://github.com/ckeditor/ckeditor4
11
https://github.com/apache/zeppelin
11
https://github.com/dnnsoftware/Dnn.Platform
11
https://github.com/ethereum/go-ethereum
11
https://github.com/intelliants/subrion
11
https://github.com/rancher/rancher
11
https://github.com/electron/electron
11
https://github.com/surrealdb/surrealdb
11
https://github.com/laravel/framework
11
https://github.com/greenpau/caddy-security
10
https://github.com/bytecodealliance/wasmtime
10
https://github.com/vercel/next.js
10
https://github.com/backstage/backstage
10
https://github.com/decidim/decidim
10
https://github.com/simplesamlphp/simplesamlphp
10
https://github.com/aio-libs/aiohttp
10
https://github.com/laurent22/joplin
10
https://github.com/wallabag/wallabag
10
https://github.com/vllm-project/vllm
10
https://github.com/TryGhost/Ghost
10
https://github.com/liufee/cms
10
https://github.com/PHPOffice/PhpSpreadsheet
10
https://github.com/thorsten/phpMyFAQ
9
https://github.com/dotnet/runtime
9
https://github.com/alkacon/opencms-core
9
https://github.com/opencast/opencast
9
https://github.com/pimcore/admin-ui-classic-bundle
9
https://github.com/jquery/jquery
9
https://github.com/sparklemotion/nokogiri
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/puppetlabs/puppet
9
https://github.com/OctoPrint/OctoPrint
9
https://github.com/dpgaspar/Flask-AppBuilder
9
https://github.com/urllib3/urllib3
9
https://github.com/publify/publify
9
https://github.com/jenkinsci/git-plugin
9
https://github.com/parse-community/parse-server
8
https://github.com/hashicorp/nomad
8
https://github.com/gogs/gogs
8
https://github.com/openbao/openbao
8
https://github.com/pandao/editor.md
8
https://github.com/nilsteampassnet/teampass
8
https://github.com/rubygems/rubygems
8
https://github.com/dolibarr/dolibarr
8
https://github.com/sulu/sulu
8
https://github.com/apache/superset
8
https://github.com/eclipse/jetty.project
8
https://github.com/pyload/pyload
8
https://github.com/FlowiseAI/Flowise
8
https://github.com/LavaLite/cms
8
https://github.com/getgrav/grav
8
https://github.com/zendframework/zendframework
8
https://github.com/ckan/ckan
8
https://github.com/onionshare/onionshare
8
https://github.com/kubeedge/kubeedge
8
https://github.com/modoboa/modoboa
8
https://github.com/rails/rails-html-sanitizer
8
https://github.com/openstack/glance
8
https://github.com/opensearch-project/security
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/OPCFoundation/UA-.NETStandard
7
https://github.com/hashicorp/vault
7
https://github.com/nocodb/nocodb
7
https://github.com/opencontainers/runc
7
https://github.com/louislam/uptime-kuma
7
https://github.com/twbs/bootstrap
7
https://github.com/jupyter/notebook
7
https://github.com/croogo/croogo
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/scrapy/scrapy
7
https://github.com/zitadel/zitadel
7
https://github.com/n8n-io/n8n
7
https://github.com/kevinpapst/kimai2
7
https://github.com/containers/podman
7
https://github.com/python-pillow/Pillow
7
https://github.com/openstack/horizon
7
https://github.com/bagisto/bagisto
7
https://github.com/igniterealtime/Openfire
7
https://github.com/vega/vega
7
https://github.com/treeverse/lakeFS
7
https://github.com/Leantime/leantime
7
https://github.com/kubevirt/kubevirt
7
https://github.com/modxcms/revolution
7
https://github.com/Sylius/Sylius
7
https://github.com/zenml-io/zenml
7
https://github.com/chakra-core/ChakraCore
7
https://github.com/StarCitizenTools/mediawiki-skins-Citizen
7
https://github.com/vaadin/flow
7
https://github.com/denoland/deno
7
https://github.com/nahsra/antisamy
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/janeczku/calibre-web
7
https://github.com/opencv/opencv
7
https://github.com/matrix-org/matrix-rust-sdk
7
https://github.com/google/fscrypt
7
https://github.com/undertow-io/undertow
7
https://github.com/py-pdf/pypdf
7
https://github.com/jeecgboot/jeecg-boot
7
https://github.com/dragonflyoss/dragonfly
7
https://github.com/ezsystems/ezplatform-admin-ui
6
https://github.com/sfackler/rust-openssl
6
https://github.com/withastro/astro
6
https://github.com/vantage6/vantage6
6
https://github.com/spatie/browsershot
6
https://github.com/pomerium/pomerium
6
https://github.com/pallets/jinja
6
https://github.com/run-llama/llama_index
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/jenkinsci/config-file-provider-plugin
6
https://github.com/jquery/jquery-ui
6
https://github.com/1Panel-dev/1Panel
6