← All credits

Red Hat would like to thank Adel Assakaf (Oteria) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

CVE-2026-125652

Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry point

CVE-2026-110932

Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cache