product of redhat

single sign-on

14 thingsrelated by NVD

Severity

critical 4 high 10 medium 4 low 1

Being told

Watch: its feed Ask more of it

The feed says each thing that enters, leaves or changes; a reader adds its address, /zetlyn/trackers/cve/things.atom?q=…, to theirs.

Every thing

undertow: Undertow: Request Smuggling via Malformed HTTP Request Headers CVE-2026-28369	Severity critical
undertow: Undertow: Request smuggling via inconsistent header parsing CVE-2026-28368	Severity critical
undertow: Undertow: Request smuggling via `\r\r\r` as a header block terminator CVE-2026-28367	Severity critical
keycloak-services: keycloak-services: Required signed-JWT assertion policy can be bypassed with unsigned assertion headers CVE-2026-16093	Severity medium
keycloak-services: keycloak-services: Group hierarchy search discloses hidden parent groups under FGAP v2 CVE-2026-15945	Severity medium
org.keycloak/keycloak-services: Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass) CVE-2026-3009	Severity high
undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF CVE-2025-12543	Severity critical
undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability CVE-2025-9784	Severity high
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests… CVE-2024-7885	Severity high
A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a… CVE-2024-1635	Severity high
A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the… CVE-2023-6927	Severity medium
An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of… CVE-2023-6563	Severity high
A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A… CVE-2023-6291	Severity high
A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This… CVE-2023-6134	Severity medium