request-9047-keycloak-fips-26.4

Direct Vulnerabilities

Known vulnerabilities in the request-9047-keycloak-fips-26.4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-40984	<26.4.7-r34
L GHSA-g3pr-3p32-fp23	<26.4.7-r34
L GHSA-8c42-7qj2-3j46	<26.4.7-r33
L Information Exposure Through Caching	<26.4.7-r33
L Missing Release of Resource after Effective Lifetime	<26.4.7-r28
L Improper Authentication	<26.4.7-r30
L GHSA-qcxp-gm7m-4j5v	<26.4.7-r30
M Allocation of Resources Without Limits or Throttling	<26.4.7-r28
L GHSA-mfg7-5gfp-c4w3	<26.4.7-r28
L GHSA-3g76-f9xq-8vp6	<26.4.7-r28
L GHSA-c69g-56f8-xwqj	<26.4.7-r27
M HTTP Request Smuggling	<26.4.7-r27
L GHSA-q6cq-mhr2-jmr5	<26.4.7-r26
H Resource Exhaustion	<26.4.7-r26
L GHSA-wh89-7897-x99h	<26.4.7-r26
L CRLF Injection	<26.4.7-r26
L GHSA-r7wm-3cxj-wff9	<26.4.7-r25
L Not Failing Securely ('Failing Open')	<26.4.7-r24
L GHSA-j92g-9f8w-j867	<26.4.7-r24
H Resource Exhaustion	<26.4.7-r23
L GHSA-4mp9-239f-g9hg	<26.4.7-r23
L GHSA-q4f6-jm68-57ww	<26.4.7-r23
L GHSA-6cqp-g7gg-8hr5	<26.4.7-r23
L Resource Exhaustion	<26.4.7-r23
H HTTP Request Smuggling	<26.4.7-r23
L GHSA-mvh2-crg5-v77c	<26.4.7-r23
L GHSA-jppx-w49h-x2qq	<26.4.7-r23
M CRLF Injection	<26.4.7-r23
H Allocation of Resources Without Limits or Throttling	<26.4.7-r23
L GHSA-gcjf-9mgh-3p7g	<26.4.7-r23
L GHSA-6jqx-86gh-f27w	<26.4.7-r23
L Resource Exhaustion	<26.4.7-r23
L Improper Access Control	<26.4.7-r23
L GHSA-558v-64gr-wgg4	<26.4.7-r22
H Loop with Unreachable Exit Condition ('Infinite Loop')	<26.4.7-r22
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<26.4.7-r20
L GHSA-5jmj-h7xm-6q6v	<26.4.7-r20
L GHSA-wmxr-6j5f-838p	<26.4.7-r19
H Improper Validation of Specified Type of Input	<26.4.7-r19
L GHSA-j3rv-43j4-c7qm	<26.4.7-r19
L Incomplete Blacklist	<26.4.7-r19
L GHSA-9fxm-vc8v-hj55	<26.4.7-r19
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<26.4.7-r19
L GHSA-hgj6-7826-r7m5	<26.4.7-r19
L Server-Side Request Forgery (SSRF)	<26.4.7-r19
L Incorrect Authorization	<26.4.7-r19
L GHSA-rmj7-2vxq-3g9f	<26.4.7-r19
L Incorrect Authorization	<26.4.7-r19
L GHSA-rcqc-6cw3-h962	<26.4.7-r19
L GHSA-5hh8-q8hv-fr38	<26.4.7-r19
L Incomplete Blacklist	<26.4.7-r19
L Improper Verification of Cryptographic Signature	<26.4.7-r18
L Allocation of Resources Without Limits or Throttling	<26.4.7-r18
L Improper Access Control	<26.4.7-r18
L GHSA-c653-97m9-rcg9	<26.4.7-r18
L GHSA-w573-9ffj-6ff9	<26.4.7-r18
L GHSA-3qp7-7mw8-wx86	<26.4.7-r18
L Information Exposure	<26.4.7-r18
L GHSA-x4gw-5cx5-pgmh	<26.4.7-r18
C Insufficient Verification of Data Authenticity	<26.4.7-r17
L GHSA-5x3r-wrvg-rp6q	<26.4.7-r17
C Insufficient Verification of Data Authenticity	<26.4.7-r17
L Resource Exhaustion	<26.4.7-r17
L GHSA-h2qv-fj59-j46j	<26.4.7-r17
L Improper Check or Handling of Exceptional Conditions	<26.4.7-r17
L GHSA-676x-f7gg-47vc	<26.4.7-r17
L GHSA-xmv7-r254-6q78	<26.4.7-r17
L GHSA-c2gf-v879-257j	<26.4.7-r17
H Memory Leak	<26.4.7-r17
L Use of Insufficiently Random Values	<26.4.7-r17
L GHSA-cc37-9q2j-3hfv	<26.4.7-r17
L GHSA-5pvg-856g-cp85	<26.4.7-r17
H Resource Exhaustion	<26.4.7-r17

Vulnerability

Vulnerable Version

CVE-2026-40984

<26.4.7-r34