Vulnerabilities of Red Hat Red Hat Build of Keycloak

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-8922	A flaw was found in Keycloak	5.4 Medium	May 19, 2026
CVE-2026-8830	A flaw was found in Keycloak	4.3 Medium	May 19, 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Medium	May 15, 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 High	May 13, 2026
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 High	May 13, 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Low	May 13, 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Medium	May 13, 2026
CVE-2026-39852	Quarkus is a Java framework for building cloud-native applications	8.8 High	May 5, 2026
CVE-2026-7500	When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled	5.4 Medium	Apr 30, 2026
CVE-2026-5598	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc	8.9 High	Apr 15, 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critical	Apr 15, 2026
CVE-2026-37980	A flaw was found in Keycloak, specifically in the organization selection login page	6.9 Medium	Apr 14, 2026
CVE-2026-28291	simple-git enables running native Git commands from JavaScript	8.1 High	Apr 13, 2026
CVE-2026-39364	Vite is a frontend tooling framework for JavaScript	8.2 High	Apr 7, 2026
CVE-2026-39363	Vite is a frontend tooling framework for JavaScript	8.2 High	Apr 7, 2026
CVE-2026-37977	A flaw was found in Keycloak	3.7 Low	Apr 6, 2026
CVE-2026-4636	A flaw was found in Keycloak	8.1 High	Apr 2, 2026
CVE-2026-4634	A flaw was found in Keycloak	7.5 High	Apr 2, 2026
CVE-2026-4282	A flaw was found in Keycloak	7.4 High	Apr 2, 2026
CVE-2026-4325	A flaw was found in Keycloak	5.3 Medium	Apr 2, 2026
CVE-2026-3872	A flaw was found in Keycloak	7.3 High	Apr 2, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 High	Mar 27, 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 High	Mar 27, 2026

Other Red Hat products