Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation

Keycloak: keycloak: privilege escalation due to oversized subject_token jwt

Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login

Keycloak: session hijacking via re-authentication

Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow

Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers

Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher

Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction

Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant

Org.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled users

Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion

Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison

Keycloak: cross-session email verification proof not bound to upstream identity in first-broker-login

Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak

Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.

Keycloak: keycloak: unauthorized authentication via disabled saml identity provider

Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)

Keycloak: path transversal in redirection validation

Keycloak: group-admin escalation to realm-admin

Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions

Keycloak: keycloak: security policy bypass in jwe-encrypted request object processing

Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover

Keycloak: keycloak: denial of service via specially crafted saml input

Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

Undertow: improper state management in proxy protocol parsing causes information leakage

Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass

Keycloak: keycloak: privilege escalation via improper scope mapping enforcement

Keycloak: keycloak: information disclosure due to redirect_uri validation bypass

Wildfly: wildfly vulnerable to cross-site scripting (xss)

Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation

Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission

Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client data

Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters