Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie

Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

Keycloak: potential bypass of brute force protection

Keycloak: vulnerable redirect uri validation results in open redirec

Keycloak: xss via assertion consumer service url in saml post-binding flow

Keycloak: impersonation via logout token exchange

Keycloak: leak of configured ldap bind credentials through the keycloak admin console