Vulnérabilités connues pour Red Hat Build of Keycloak

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-93558	Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service	7.5 Élevée	18 sept. 2026
CVE-2026-93492	Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size	5.3 Moyenne	18 sept. 2026
CVE-2026-93491	Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue	7.5 Élevée	18 sept. 2026
CVE-2026-93488	Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams	7.5 Élevée	18 sept. 2026
CVE-2026-87743	A flaw was found in Quarkus HTTP security	7.5 Élevée	18 sept. 2026
CVE-2026-89058	Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config	7.4 Élevée	18 sept. 2026
CVE-2026-89059	Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)	7.5 Élevée	18 sept. 2026
CVE-2026-90997	A flaw was found in Keycloak	7.4 Élevée	17 sept. 2026
CVE-2026-79651	A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service…	7.5 Élevée	16 sept. 2026
CVE-2026-74909	Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security…	8.1 Élevée	16 sept. 2026
CVE-2026-18212	A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access…	7.5 Élevée	16 sept. 2026
CVE-2026-92358	Keycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linking	6.4 Moyenne	16 sept. 2026
CVE-2026-89298	Keycloak-services: keycloak-services: confidential client secret disclosed to view-clients role via client registration get	4.9 Moyenne	11 sept. 2026
CVE-2026-88770	Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts	6.5 Moyenne	10 sept. 2026
CVE-2026-19729	Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters	4.9 Moyenne	9 sept. 2026
CVE-2026-82968	Keycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providers	6.4 Moyenne	2 sept. 2026
CVE-2026-17615	Resteasy-core: resteasy sourceprovider remote unauthenticated file read	7.5 Élevée	31 août 2026
CVE-2026-79652	A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red…	5.9 Moyenne	25 août 2026
CVE-2026-19611	Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding	7.4 Élevée	20 août 2026
CVE-2026-18963	A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity…	9.1 Critique	18 août 2026
CVE-2026-19608	Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies	5.3 Moyenne	18 août 2026
CVE-2026-18967	A flaw was found in the SAML broker component of Keycloak, an identity and access management solution	6.4 Moyenne	6 août 2026
CVE-2026-15572	A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management	8.8 Élevée	5 août 2026
CVE-2026-16442	A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user…	7.4 Élevée	5 août 2026
CVE-2026-16100	A flaw was found in the user-event metrics recording of Keycloak	6.5 Moyenne	5 août 2026

Autres produits Red Hat