Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

Keycloak: path transversal in redirection validation

Keycloak: client access via device auth request spoof

Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions

Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak

Keycloak: offline session token dos

Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover

Keycloak: keycloak: denial of service via specially crafted saml input

Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

Undertow: undertow madeyoureset http/2 ddos vulnerability

Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

Undertow: outofmemoryerror due to @multipartconfig handling

Undertow: infinite loop in sslconduit during close

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

Wildfly: wildfly vulnerable to cross-site scripting (xss)

Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

Keycloak: redirect_uri validation bypass

Keycloak: oauth client impersonation

Keycloak: session takeover with oidc offline refreshtokens

Keycloak: potential bypass of brute force protection

Keycloak: vulnerable redirect uri validation results in open redirec

Keycloak: open redirect via "form_post.jwt" jarm response mode

Keycloak: reflected xss attack

Keycloak: authorization bypass

Keycloak: reflected xss via wildcard in oidc redirect_uri

Keycloak: keycloak: denial of service due to excessive samlrequest decompression

Keycloak: log injection during webauthn authentication or registration

Keycloak: xss on impersonation under specific circumstances

Keycloak: leak of configured ldap bind credentials through the keycloak admin console