Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions

Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover

Keycloak: keycloak: denial of service via specially crafted saml input

Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

Undertow: undertow madeyoureset http/2 ddos vulnerability

Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters

Keycloak: potential bypass of brute force protection

Keycloak: keycloak: denial of service due to excessive samlrequest decompression