keycloak-26.7

Direct Vulnerabilities

Known vulnerabilities in the keycloak-26.7 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	<26.7.2-r1
M Open Redirect	<26.7.2-r1
L GHSA-wrjc-x8rr-h8h6	<26.7.2-r1
L GHSA-337j-9hxr-rhxg	<26.7.2-r1
L GHSA-8c42-7qj2-3j46	<26.7.1-r4
L Information Exposure Through Caching	<26.7.1-r4
L Missing Release of Resource after Effective Lifetime	<26.7.0-r8
L CVE-2026-40983	<26.7.1-r1
L GHSA-g3pr-3p32-fp23	<26.7.1-r1
L CVE-2026-40984	<26.7.1-r1
L GHSA-w737-wx49-qj23	<26.7.1-r1
L GHSA-mfg7-5gfp-c4w3	<26.7.0-r8
L GHSA-c69g-56f8-xwqj	<26.7.0-r7
M HTTP Request Smuggling	<26.7.0-r7
L GHSA-r7wm-3cxj-wff9	<26.7.0-r6
L CRLF Injection	<26.7.0-r5
L GHSA-q6cq-mhr2-jmr5	<26.7.0-r5
L GHSA-wh89-7897-x99h	<26.7.0-r5
H Resource Exhaustion	<26.7.0-r5
L GHSA-6jqx-86gh-f27w	<26.7.0-r4
H HTTP Request Smuggling	<26.7.0-r4
L GHSA-q4f6-jm68-57ww	<26.7.0-r4
L GHSA-mvh2-crg5-v77c	<26.7.0-r4
H Allocation of Resources Without Limits or Throttling	<26.7.0-r4
L GHSA-4mp9-239f-g9hg	<26.7.0-r4
L Resource Exhaustion	<26.7.0-r4
M CRLF Injection	<26.7.0-r4
L GHSA-jppx-w49h-x2qq	<26.7.0-r4
L Improper Access Control	<26.7.0-r4
L Resource Exhaustion	<26.7.0-r4
L GHSA-6cqp-g7gg-8hr5	<26.7.0-r4
H Resource Exhaustion	<26.7.0-r4
L GHSA-gcjf-9mgh-3p7g	<26.7.0-r4
H Loop with Unreachable Exit Condition ('Infinite Loop')	<26.7.0-r3
L GHSA-558v-64gr-wgg4	<26.7.0-r3
L Not Failing Securely ('Failing Open')	<26.7.0-r2
L GHSA-j92g-9f8w-j867	<26.7.0-r2
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<26.7.0-r1
L GHSA-5jmj-h7xm-6q6v	<26.7.0-r1