Vulnerabilities of Red Hat Red Hat Single Sign-On 7

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 High	Mar 27, 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 High	Mar 27, 2026
CVE-2026-28367	Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator	8.7 High	Mar 27, 2026
CVE-2026-28369	Undertow: undertow: request smuggling via malformed http request headers	8.7 High	Mar 27, 2026
CVE-2026-28368	Undertow: undertow: request smuggling via inconsistent header parsing	8.7 High	Mar 27, 2026
CVE-2026-3121	A flaw was found in Keycloak	6.5 Medium	Mar 26, 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 High	Mar 26, 2026
CVE-2026-4874	A flaw was found in Keycloak	3.1 Low	Mar 26, 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 High	Mar 25, 2026
CVE-2026-3260	A flaw was found in Undertow	5.9 Medium	Mar 24, 2026
CVE-2026-4628	A flaw was found in Keycloak	4.3 Medium	Mar 23, 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 High	Mar 20, 2026
CVE-2026-4366	A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP…	5.8 Medium	Mar 18, 2026
CVE-2026-2575	A flaw was found in Keycloak	5.3 Medium	Mar 18, 2026
CVE-2026-2092	A flaw was found in Keycloak	7.7 High	Mar 18, 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 High	Mar 12, 2026
CVE-2026-3429	A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level…	4.2 Medium	Mar 11, 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 High	Mar 7, 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 High	Mar 6, 2026
CVE-2026-3009	A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an…	8.1 High	Mar 5, 2026
CVE-2026-1605	In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed…	7.5 High	Mar 5, 2026
CVE-2026-27446	Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis	9.3 Critical	Mar 4, 2026
CVE-2026-0871	A flaw was found in Keycloak	4.9 Medium	Feb 27, 2026
CVE-2026-27606	Rollup is a module bundler for JavaScript	8.8 High	Feb 25, 2026

Other Red Hat products