Package · Maven

org.keycloak:keycloak-saml-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2026-2575

Keycloak: keycloak: denial of service due to excessive samlrequest decompression

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE deco…

Red Hat Red Hat build of Keycloak 26.4 RHEL-8 based Middleware Containers Red Hat Single Sign-On 7.6 for RHEL 7 Wolfi Maven

Mar 18, 2026