Hoch 7.7Linux-Server
Hoch 7.5Linux-Server
github.com/kyverno/kyverno: Kyverno: Denial of Service via unexpected data types in In and NotIn operators
Hoch 7.7Linux-Server
github.com/kyverno/kyverno: Kyverno: Image verification bypass via missing Subject Alternative Name in signing certificates
Hoch 8.5Linux-Server
github.com/kyverno/kyverno: Kyverno: Unauthorized cross-namespace resource modification via mutate-existing background processor
Hoch 7.5Linux-Server
github.com/kyverno/kyverno: Kyverno: Denial of Service via crafted attestation statements
Mittel 6.5Linux-Server
github.com/kyverno/kyverno: Kyverno: Denial of Service via unchecked type assertion in variable substitution
Hoch 7.7Linux-Server
github.com/kyverno/kyverno: Kyverno: Namespace isolation bypass via crafted APICall URL path
Mittel 6.5Linux-Server
github.com/kyverno/kyverno: Kyverno: Denial of Service via unbounded CEL policy evaluation
Hoch 8.5Linux-Server
github.com/kyverno/kyverno: Kyverno: Information disclosure via internal label spoofing
Hoch 7.7Linux-Server
github.com/kyverno/kyverno: Kyverno: Security policy bypass via improper exception handling in admission policy generator
Hoch 7.7Linux-Server
github.com/kyverno/kyverno: Kyverno: Denial of Service via crafted policy wildcard patterns
Hoch 7.7Linux-Server
github.com/kyverno/kyverno: Kyverno: Denial of Service via unbounded variable substitution loop
Mittel 6.5Linux-Server
keycloak-services: keycloak-services: Protocol mapper with jsonType=JSON bypasses token sanitization
Hoch 7.1Linux-Server
keycloak-services: keycloak-services: Client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator…
Mittel 6.4Linux-Server
keycloak-services: keycloak-services: DCR azp and sid claim substitution allows Account REST session takeover
Hoch 8.8Linux-Server
CVE-2026-97175
Mittel 6.8Linux-Server
keycloak-services: keycloak-services: CIBA sub parameter injection causes attacker authentication to issue victim tokens
Mittel 6.5Linux-Server
keycloak-services: keycloak-services: DCR registration-time claim-path gap allows forging realm_access.roles
Mittel 5.4Linux-Server
keycloak-services: keycloak-services: Indefinite access token renewal via Standard Token Exchange V2
Hoch 8.0Linux-Server
org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates
Mittel 4.2Linux-Server
keycloak-services: keycloak-services: Stateless token preferred_username fallback enables identity rebinding
Hoch 7.4Linux-Server
keycloak-core: keycloak-core: SAML adapter does not bind signed assertions to the configured identity provider issuer
Hoch 8.1Linux-Server
keycloak-services: keycloak-services: DCR protocol mapper config not validated, allowing IAT holders to forge sub and aud claims in signed tokens
Mittel 4.9Linux-Server
keycloak-services: keycloak-services: SAML broker ignores ProxyRestriction delegation constraints
Hoch 7.4Linux-Server
keycloak-services: keycloak-services: SAML broker accepts holder-of-key assertions without proof of key possession
Hoch 7.5Linux-Server
keycloak-services: keycloak-services: Unauthenticated Denial of Service via SAML SOAP endpoint unbounded XML parsing
Mittel 6.8Linux-Server
keycloak-services: keycloak-services: Admin API missing audience check
Mittel 5.5Linux-Server
ansible-core: no_log does not censor the task exception field, leaking secret values via the default stdout callback
Mittel 4.3Linux-Server
quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @SecureField ignored for filter and sort
Kritisch 9.1Linux-Server