Skip to contentRed Hat Build Of Keycloak 26.2.11 vulnerabilities
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +3 more +5 moreOrg.keycloak/keycloak-services: webauthn attestation statement verification bypassCVE-2025-12150Fix available3.1 Low
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreOrg.keycloak.storage.ldap: keycloak: deserialization of untrusted data in ldap user federationCVE-2025-13467Fix available5.5 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreOrg.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session idCVE-2025-12390Fix available6.0 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreKeycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removedCVE-2025-12110Fix available5.4 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 moreKeycloak-server: too long and not settings compliant sessionCVE-2025-11429Fix available5.4 Medium