Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow

Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers

Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher

In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization

Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)

Undertow: undertow madeyoureset http/2 ddos vulnerability

An improper initialization vulnerability was found in Galleon

A flaw was found in undertow

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain

A flaw was found in JBoss-client

Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission