PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
org.keycloak:keycloak-saml-adapter-core Keycloak: Denial of Service due to excessive SAMLRequest decompression Medium Risk 5.3 6 months ago 2 hours ago
org.keycloak:keycloak-saml-core Keycloak: Denial of Service due to excessive SAMLRequest decompression Medium Risk 5.3 6 months ago 2 hours ago
org.keycloak:keycloak-services Keycloak: Denial of Service due to excessive SAMLRequest decompression Medium Risk 5.3 6 months ago 2 hours ago
cloak Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds Unknown 6 hours ago 6 hours ago
cloak_ecto Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds Unknown 6 hours ago 6 hours ago
cloak Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping Unknown 6 hours ago 6 hours ago
org.keycloak:keycloak-services Keycloak has an Authentication Bypass by Primary Weakness Medium Risk 4.3 4 months ago 26 days ago
org.keycloak:keycloak-services Keycloak: Replay of action tokens via improper handling of single-use entries Medium Risk 5.3 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw High Risk 7.4 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak has a Forced Browsing issue Medium Risk 5.4 5 months ago 26 days ago
org.keycloak:keycloak-services Keycloak vulnerable to session takeovers due to reuse of session identifiers Medium Risk 6.0 11 months ago 26 days ago
org.keycloak:keycloak-quarkus-server Keycloak Build Process Exposes Sensitive Data Medium Risk 5.9 1 year ago 26 days ago
org.keycloak:keycloak-services Keycloak: Unauthorized access via improper validation of encrypted SAML assertions High Risk 7.7 3 months ago 26 days ago
org.keycloak:keycloak-services Keycloak has an Improper Verification of Cryptographic Signature issue Medium Risk 5.9 4 months ago 26 days ago
org.keycloak:keycloak-services Keycloak Services has Improper Validation of Consistency within Input Medium Risk 4.2 4 months ago 26 days ago
org.keycloak:keycloak-services Keycloak: UMA Policy Resource Injection Allows Unauthorized Cross-User Permission Grants High Risk 8.1 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak: Application-Level DoS via Scope Processing High Risk 7.5 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak: Redirect URI validation bypass via ..;/ path traversal in OIDC auth endpoint High Risk 7.3 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak: Information disclosure of disabled user attributes via administrative endpoint Low Risk 2.7 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak's identity-first login flow exposes user information Low Risk 3.7 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API Medium Risk 4.2 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak has Improper Access Control that allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false Medium Risk 4.3 6 months ago 26 days ago
org.keycloak:keycloak-services Keycloak Server-Side Request Forgery via OIDC token endpoint manipulation Low Risk 3.1 6 months ago 26 days ago
org.keycloak:keycloak-quarkus-server Keycloak logs sensitive headers Medium Risk 5.0 7 months ago 26 days ago
org.keycloak:keycloak-services Keycloak: Missing Check on Disabled Client for Docker Registry Protocol Low Risk 3.8 7 months ago 26 days ago
org.keycloak:keycloak-services Keycloak services allows the issuance of access and refresh tokens for disabled users Medium Risk 6.5 8 months ago 26 days ago
org.keycloak:keycloak-quarkus-server Keycloak unable to restrict access to the admin console Low Risk 3.7 10 months ago 26 days ago
org.keycloak:keycloak-services Keycloak does not invalidate sessions when "Remember Me" is disabled Medium Risk 5.4 11 months ago 26 days ago
org.keycloak:keycloak-model-storage-services Keycloak Potential Variable Reference in Model Storage Services Medium Risk 4.9 12 months ago 26 days ago
org.keycloak:keycloak-quarkus-server Denial of Service in Keycloak Server via Security Headers Medium Risk 6.5 1 year ago 26 days ago
org.keycloak:keycloak-quarkus-server Keycloak allows unrestricted admin use of system and environment variables Medium Risk 4.9 1 year ago 26 days ago
org.keycloak:keycloak-services org.keycloak:keycloak-services has Inefficient Regular Expression Complexity Medium Risk 6.5 1 year ago 26 days ago
org.keycloak:keycloak-quarkus-server Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path Low Risk 2.7 1 year ago 26 days ago
org.keycloak:keycloak-core Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination High Risk 7.1 1 year ago 26 days ago
org.keycloak:keycloak-quarkus-server Keycloak proxy header handling Denial-of-Service (DoS) vulnerability Medium Risk 4.7 1 year ago 26 days ago
org.keycloak:keycloak-services Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect Medium Risk 6.1 1 year ago 26 days ago
org.keycloak:keycloak-saml-core Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak High Risk 7.7 1 year ago 26 days ago
org.keycloak:keycloak-core Keycloaks's One Time Passcode (OTP) is valid longer than expiration timeSeverity Medium Risk 4.8 1 year ago 26 days ago
org.keycloak:keycloak-core Keycloak Denial of Service vulnerability Medium Risk 6.5 2 years ago 26 days ago
org.keycloak:keycloak-core Keycloak Open Redirect vulnerability Medium Risk 4.4 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak Services has a potential bypass of brute force protection Medium Risk 6.5 2 years ago 26 days ago
org.keycloak:keycloak-ldap-federation Keycloak leaks configured LDAP bind credentials through the Keycloak admin console Low Risk 2.7 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak path traversal vulnerability in redirection validation High Risk 8.1 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak vulnerable to impersonation via logout token exchange Low Risk 3.4 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow Medium Risk 6.0 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS High Risk 7.4 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak path traversal vulnerability in the redirect validation High Risk 7.1 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak Authorization Bypass vulnerability Medium Risk 5.4 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak secondary factor bypass in step-up authentication Medium Risk 5.0 2 years ago 26 days ago
org.keycloak:keycloak-services Keycloak vulnerable to session hijacking via re-authentication Medium Risk 6.5 2 years ago 26 days ago
Data courtesy of OSV.dev
Page 1