Org.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)

Org.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session id

Org.keycloak.storage.ldap: keycloak: deserialization of untrusted data in ldap user federation

Keycloak: incorrect ownership checks in /uma-policy/

Keycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removed

Keycloak-server: too long and not settings compliant session

Keycloak: keycloak: replay of action tokens via improper handling of single-use entries

Org.keycloak/keycloak-services: keycloak smtp inject vulnerability

Org.keycloak/keycloak-model-storage-service: variable injection into environment variables

Keycloak: keycloak error_description injection on error pages