Aller au contenu

Vulnérabilités de Red Hat Red Hat Build of Keycloak

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-8922 A flaw was found in Keycloak 5.4 Moyenne 19 mai 2026
CVE-2026-8830 A flaw was found in Keycloak 4.3 Moyenne 19 mai 2026
CVE-2026-45736 ws is an open source WebSocket client and server for Node.js 4.4 Moyenne 15 mai 2026
CVE-2026-42587 Netty is an asynchronous, event-driven network application framework 7.5 Élevée 13 mai 2026
CVE-2026-42584 Netty is an asynchronous, event-driven network application framework 7.3 Élevée 13 mai 2026
CVE-2026-42579 Netty is an asynchronous, event-driven network application framework 7.5 Élevée 13 mai 2026
CVE-2026-42578 Netty is an asynchronous, event-driven network application framework 2.9 Faible 13 mai 2026
CVE-2026-42581 Netty is an asynchronous, event-driven network application framework 5.8 Moyenne 13 mai 2026
CVE-2026-39852 Quarkus is a Java framework for building cloud-native applications 8.8 Élevée 5 mai 2026
CVE-2026-7500 When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled 5.4 Moyenne 30 avr. 2026
CVE-2026-5598 Covert timing channel vulnerability in Legion of the Bouncy Castle Inc 8.9 Élevée 15 avr. 2026
CVE-2025-14813 : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc 9.3 Critique 15 avr. 2026
CVE-2026-37980 A flaw was found in Keycloak, specifically in the organization selection login page 6.9 Moyenne 14 avr. 2026
CVE-2026-28291 simple-git enables running native Git commands from JavaScript 8.1 Élevée 13 avr. 2026
CVE-2026-39364 Vite is a frontend tooling framework for JavaScript 8.2 Élevée 7 avr. 2026
CVE-2026-39363 Vite is a frontend tooling framework for JavaScript 8.2 Élevée 7 avr. 2026
CVE-2026-37977 A flaw was found in Keycloak 3.7 Faible 6 avr. 2026
CVE-2026-4636 A flaw was found in Keycloak 8.1 Élevée 2 avr. 2026
CVE-2026-4634 A flaw was found in Keycloak 7.5 Élevée 2 avr. 2026
CVE-2026-4282 A flaw was found in Keycloak 7.4 Élevée 2 avr. 2026
CVE-2026-4325 A flaw was found in Keycloak 5.3 Moyenne 2 avr. 2026
CVE-2026-3872 A flaw was found in Keycloak 7.3 Élevée 2 avr. 2026
CVE-2026-4800 The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same… 8.1 Élevée 31 mars 2026
CVE-2026-33871 Netty is an asynchronous, event-driven network application framework 8.7 Élevée 27 mars 2026
CVE-2026-33870 Netty is an asynchronous, event-driven network application framework 7.5 Élevée 27 mars 2026

Autres produits Red Hat