keycloak-quarkus-server-app vulnerabilities

CVEs whose affected-version data names the keycloak-quarkus-server-app package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-0976Low· 3.7

9mo ago

A flaw was found in Keycloak

A flaw was found in Keycloak. This improper input validation vulnerability occurs because Keycloak accepts RFC-compliant matrix parameters in URL path segments, while common reverse proxy configurations may ignore or mishandle them. A re…

▾ SunlitRed Hat · Red Hat build of Keycloak 26.4.9EPSS 0.49%via NVD