Package · Maven

org.keycloak:keycloak-services

104 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.3

CVE-2026-9794 Public exploit

Keycloak: keycloak: information disclosure via saml ecp endpoint

A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP (Security Assertion Markup Language Enhanced Client or Proxy) endpoint with varying client IDs. By obser…

Red Hat Red Hat build of Keycloak 26.6 Red Hat build of Keycloak 26.4 Red Hat build of Keycloak 26.4.13 Wolfi Maven

May 28, 2026
Medium 5.4

CVE-2022-1274 Public exploit

HTML Injection in Keycloak Admin REST API

A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.

org.keycloak:keycloak-services Maven

Mar 29, 2023