Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size

Io.undertow/undertow: undertow: http response header integrity issue due to character truncation

Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap

Undertow: learningpushhandler can lead to remote memory dos attacks

Keycloak-core: dos via account lockout

Undertow: directory traversal vulnerability

Keycloak-services: keycloak-services: confidential client secret disclosed to view-clients role via client registration get

Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.

Org.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administrators

Org.keycloak/keycloak-services: jwt token cache exhaustion leading to denial of service (dos) in keycloak

Wildfly-core: path traversal on wildfly domain controller

Modcluster-core: mod_cluster advertise listener: unauthenticated dos via crafted multicast datagram

Codehaus-plexus: xml external entity (xxe) injection

Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action ordering

Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2

Wildfly: no timeout for eap management interface may lead to denial of service (dos)

Org.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocol

Keycloak-core: stored xss in keycloak when creating a items in admin console

Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal

Keycloak: impersonation via logout token exchange

Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation

Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdata

ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled

Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2

Keycloak-quarkus-server: keycloak path trasversal