Red Hat Red Hat build of Keycloak 26.0.6

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2024-10492Keycloak-quarkus-server: keycloak path trasversalLOW 2.70.7 %
CVE-2024-10451Org.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build processMEDIUM 5.90.9 %
CVE-2024-10270Org.keycloak:keycloak-services: keycloak denial of serviceMEDIUM 6.51.2 %
CVE-2024-9666Org.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerabilityMEDIUM 4.70.4 %