RH
Product
Red Hat Build of Keycloak
110
CVEs
0
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 4High 36Medium 60Low 10
Watch
Add Red Hat Build of Keycloak to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42581 | 9.8 | May 13 | Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization Affected: All versions, or not specified |
| CVE-2026-33228 | 9.8 | Mar 20 | flatted: Prototype Pollution via parse() Affected: All versions, or not specified |
| CVE-2026-42584 | 9.1 | May 13 | Netty: HttpClientCodec response desynchronization Affected: All versions, or not specified |
| CVE-2026-42579 | 9.1 | May 13 | Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) Affected: All versions, or not specified |
Showing 4