PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
org.keycloak:keycloak-services Keycloak vulnerable to authorization bypass via incorrect uri comparison High Risk 8.1 1 day ago 1 day ago
org.keycloak:keycloak-services Keycloak allows unauthorized access to resources via uma permission ticket bypass Medium Risk 4.6 1 day ago 1 day ago
org.keycloak:keycloak-services Keycloak vulnerable to information disclosure through arbitrary filesystem path probing Medium Risk 4.9 1 day ago 1 day ago
org.keycloak:keycloak-services Keycloak: Attacker can re-enable and take over disabled clients via registration access token Medium Risk 6.5 1 day ago 1 day ago
org.keycloak:keycloak-services Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass High Risk 7.3 1 day ago 1 day ago
org.keycloak:keycloak-services Keycloak: Unauthorized access via improper validation of encrypted SAML assertions High Risk 7.7 4 months ago 4 days ago
org.keycloak:keycloak-services Keycloak's identity-first login flow exposes user information Low Risk 3.7 7 months ago 8 days ago
org.keycloak:keycloak-services Keycloak has Improper Access Control that allows attackers with valid credentials to bypass the allowRemoteResourceManagement=false Medium Risk 4.3 7 months ago 8 days ago
org.keycloak:keycloak-services Keycloak: Arbitrary code execution via Stored Cross-Site Scripting (XSS) in organization selection login page Medium Risk 6.9 6 months ago 8 days ago
org.keycloak:keycloak-services Keycloak: Denial of Service due to excessive SAMLRequest decompression Medium Risk 5.3 7 months ago 24 days ago
org.keycloak:keycloak-services Keycloak has an Authentication Bypass by Primary Weakness Medium Risk 4.3 5 months ago 1 month ago
org.keycloak:keycloak-services Keycloak: Replay of action tokens via improper handling of single-use entries Medium Risk 5.3 7 months ago 1 month ago
org.keycloak:keycloak-services Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw High Risk 7.4 7 months ago 1 month ago
org.keycloak:keycloak-services Keycloak has a Forced Browsing issue Medium Risk 5.4 6 months ago 1 month ago
org.keycloak:keycloak-services Keycloak vulnerable to session takeovers due to reuse of session identifiers Medium Risk 6.0 1 year ago 1 month ago
org.keycloak:keycloak-services Keycloak has an Improper Verification of Cryptographic Signature issue Medium Risk 5.9 5 months ago 1 month ago
org.keycloak:keycloak-services Keycloak Services has Improper Validation of Consistency within Input Medium Risk 4.2 5 months ago 1 month ago
org.keycloak:keycloak-services Keycloak: UMA Policy Resource Injection Allows Unauthorized Cross-User Permission Grants High Risk 8.1 7 months ago 1 month ago
org.keycloak:keycloak-services Keycloak: Application-Level DoS via Scope Processing High Risk 7.5 7 months ago 1 month ago
org.keycloak:keycloak-services Keycloak: Redirect URI validation bypass via ..;/ path traversal in OIDC auth endpoint High Risk 7.3 7 months ago 1 month ago
org.keycloak:keycloak-services Keycloak: Information disclosure of disabled user attributes via administrative endpoint Low Risk 2.7 7 months ago 1 month ago
org.keycloak:keycloak-services Keycloak: Improper Access Control Leading to MFA Deletion and Account Takeover in Keycloak Account REST API Medium Risk 4.2 7 months ago 1 month ago
org.keycloak:keycloak-services Keycloak Server-Side Request Forgery via OIDC token endpoint manipulation Low Risk 3.1 7 months ago 1 month ago
org.keycloak:keycloak-services Keycloak: Missing Check on Disabled Client for Docker Registry Protocol Low Risk 3.8 8 months ago 1 month ago
org.keycloak:keycloak-services Keycloak services allows the issuance of access and refresh tokens for disabled users Medium Risk 6.5 9 months ago 1 month ago
org.keycloak:keycloak-services Keycloak does not invalidate sessions when "Remember Me" is disabled Medium Risk 5.4 1 year ago 1 month ago
org.keycloak:keycloak-services org.keycloak:keycloak-services has Inefficient Regular Expression Complexity Medium Risk 6.5 1 year ago 1 month ago
org.keycloak:keycloak-services Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect Medium Risk 6.1 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak Services has a potential bypass of brute force protection Medium Risk 6.5 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak path traversal vulnerability in redirection validation High Risk 8.1 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak vulnerable to impersonation via logout token exchange Low Risk 3.4 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow Medium Risk 6.0 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS High Risk 7.4 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak path traversal vulnerability in the redirect validation High Risk 7.1 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak Authorization Bypass vulnerability Medium Risk 5.4 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak secondary factor bypass in step-up authentication Medium Risk 5.0 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak vulnerable to session hijacking via re-authentication Medium Risk 6.5 2 years ago 1 month ago
org.keycloak:keycloak-services Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods Low Risk 3.1 9 months ago 1 month ago
org.keycloak:keycloak-services Keycloak vulnerable to user impersonation via stolen UUID code High Risk 8.7 3 years ago 1 month ago
org.keycloak:keycloak-services Keycloak: Unauthenticated account takeover via reset-credentials flow bypass Critical 9.1 2 months ago 2 months ago
org.keycloak:keycloak-services Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass Medium Risk 6.5 5 months ago 2 months ago
org.keycloak:keycloak-services Keycloak has session fixation in Elytron SAML adapters High Risk 7.1 2 years ago 2 months ago
org.keycloak:keycloak-services Keycloak Account Resources user lookup contains broken access control Medium Risk 4.3 5 months ago 2 months ago
org.keycloak:keycloak-services Keycloak: Unauthorized account takeover via WebAuthn token replay Medium Risk 6.8 5 months ago 2 months ago
org.keycloak:keycloak-services Keycloak: Unauthorized authentication via disabled SAML Identity Provider High Risk 8.1 7 months ago 2 months ago
org.keycloak:keycloak-services Keycloak Protection API allows authenticated clients to access and modify resources owned by other Resource Servers Medium Risk 6.8 5 months ago 2 months ago
org.keycloak:keycloak-services Keycloak REST Services has a WebAuthn Attestation Statement Verification Bypass Low Risk 3.1 8 months ago 2 months ago
org.keycloak:keycloak-services Keycloak vulnerable to two factor authentication bypass Medium Risk 5.4 1 year ago 2 months ago
org.keycloak:keycloak-services Keycloak allows authentication using an Identity Provider (IdP) even after it has been disabled by an administrator High Risk 8.1 7 months ago 2 months ago
org.keycloak:keycloak-services Keycloak: Open redirect when using wildcard valid redirect URIs in Keycloak High Risk 8.1 5 months ago 2 months ago
Data courtesy of OSV.dev
Page 1